CVE-2026-42002 Concurrency and locking defects in GSS-TSIG
HighCVSS 7.5
EPSS 0.26%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Concurrency and locking defects in GSS-TSIG
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerDNS Authoritative | >= 4.9.0, < 4.9.15 | 4.9.15 |
| PowerDNS Authoritative | >= 5.0.0, < 5.0.5 | 5.0.5 |
| debian/pdns(Debian:12) | All versions | No fix listed |
| debian/pdns(Debian:12) | = 4.7.3-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.0-1 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.0-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.1-1 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.1-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.2-1 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.2-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.3-1 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.3-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.3-3 | No fix listed |
| debian/pdns(Debian:12) | = 4.8.3-4 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.0-1 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.0-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.1-1 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.1-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.1-3 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.2-1 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.2-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.3-1 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.3-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.3-3 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.4-1 | No fix listed |
Show 37 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pdns(Debian:12) | = 4.9.4-2 | No fix listed |
| debian/pdns(Debian:12) | = 4.9.7-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.0-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.0-2 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.1-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.2-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.3-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.4-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.5-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.5-2 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.5-3 | No fix listed |
| debian/pdns(Debian:12) | = 5.0.5-4 | No fix listed |
| debian/pdns(Debian:12) | = 5.1.0-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.1.1-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.1.1-2 | No fix listed |
| debian/pdns(Debian:12) | = 5.1.1-3 | No fix listed |
| debian/pdns(Debian:12) | = 5.1.2-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.1.3-1 | No fix listed |
| debian/pdns(Debian:12) | = 5.1.4-1 | No fix listed |
| debian/pdns(Debian:13) | < 4.9.15-0+deb13u1 | 4.9.15-0+deb13u1 |
| debian/pdns(Debian:13) | = 4.9.14-0+deb13u1 | No fix listed |
| debian/pdns(Debian:13) | = 4.9.7-1 | No fix listed |
| debian/pdns(Debian:14) | < 5.0.5-1 | 5.0.5-1 |
| debian/pdns(Debian:14) | = 4.9.7-1 | No fix listed |
| debian/pdns(Debian:14) | = 5.0.0-1 | No fix listed |
| debian/pdns(Debian:14) | = 5.0.0-2 | No fix listed |
| debian/pdns(Debian:14) | = 5.0.1-1 | No fix listed |
| debian/pdns(Debian:14) | = 5.0.2-1 | No fix listed |
| debian/pdns(Debian:14) | = 5.0.3-1 | No fix listed |
| debian/pdns(Debian:14) | = 5.0.4-1 | No fix listed |
| ubuntu/pdns(Ubuntu:22.04) | All versions | No fix listed |
| alpine/pdns(Alpine:v3.23) | < 5.0.5-r0 | 5.0.5-r0 |
| alpine/pdns(Alpine:v3.24) | < 5.0.5-r0 | 5.0.5-r0 |
| ubuntu/pdns(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/pdns(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/pdns(Ubuntu:26.10) | All versions | No fix listed |
| PowerDNS Authoritative | >= 4.7.0, < 4.9.15 | 4.9.15 |
References
- docs.powerdns.com broken-link
- Debian Security Tracker CVE-2026-42002 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- security.alpinelinux.org vendor-advisory