CVE-2026-52688 RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
HighCVSS 7.5
EPSS 0.18%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerDNS Recursor | >= 5.2.0, < 5.2.12 | 5.2.12 |
| PowerDNS Recursor | >= 5.3.0, < 5.3.9 | 5.3.9 |
| PowerDNS Recursor | >= 5.4.0, < 5.4.4 | 5.4.4 |
| debian/pdns-recursor(Debian:12) | All versions | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.8.4-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.8.6-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.8.7-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.8.8-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.8.8-1+deb12u1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.0-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.0-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.1-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.1-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.1-3 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.1-4 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.2-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.2-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.3-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.4-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 4.9.5-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.0.5-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.0.7-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.0.7-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.0.9-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.1.3-1 | No fix listed |
Show 66 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pdns-recursor(Debian:12) | = 5.1.3-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.0-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.0-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.0-3 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.0-4 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.0-5 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.1-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.2-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.2-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.4-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.4-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.2.5-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.0-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.0-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.0-3 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.0-4 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.0-5 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.1-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.3-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.4-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.4-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.3.5-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.0-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.1-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.1-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.2-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.2-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.3-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.4-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.5-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.6-1 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.6-2 | No fix listed |
| debian/pdns-recursor(Debian:12) | = 5.4.8-1 | No fix listed |
| debian/pdns-recursor(Debian:13) | < 5.2.12-0+deb13u1 | 5.2.12-0+deb13u1 |
| debian/pdns-recursor(Debian:13) | = 5.2.11-0+deb13u1 | No fix listed |
| debian/pdns-recursor(Debian:13) | = 5.2.4-2 | No fix listed |
| debian/pdns-recursor(Debian:13) | = 5.2.4-2+deb13u1 | No fix listed |
| debian/pdns-recursor(Debian:13) | = 5.2.5-1 | No fix listed |
| debian/pdns-recursor(Debian:13) | = 5.2.6-0+deb13u1 | No fix listed |
| debian/pdns-recursor(Debian:13) | = 5.2.7-0+deb13u1 | No fix listed |
| debian/pdns-recursor(Debian:13) | = 5.2.8-0+deb13u1 | No fix listed |
| debian/pdns-recursor(Debian:13) | = 5.2.9-0+deb13u1 | No fix listed |
| debian/pdns-recursor(Debian:14) | < 5.4.4-1 | 5.4.4-1 |
| debian/pdns-recursor(Debian:14) | = 5.2.4-2 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.2.5-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.0-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.0-2 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.0-3 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.0-4 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.0-5 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.1-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.3-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.4-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.4-2 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.3.5-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.4.0-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.4.1-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.4.1-2 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.4.2-1 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.4.2-2 | No fix listed |
| debian/pdns-recursor(Debian:14) | = 5.4.3-1 | No fix listed |
| ubuntu/pdns-recursor(Ubuntu:22.04) | All versions | No fix listed |
| alpine/pdns-recursor(Alpine:v3.24) | < 5.4.4-r0 | 5.4.4-r0 |
| ubuntu/pdns-recursor(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/pdns-recursor(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/pdns-recursor(Ubuntu:26.10) | All versions | No fix listed |
References
- docs.powerdns.com
- Debian Security Tracker CVE-2026-52688 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- security.alpinelinux.org vendor-advisory