Net::DNS vulnerabilities

2 known vulnerabilities in Net::DNS from Nlnetlabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Net::DNS: Uncontrolled Recursion

  CVE-2026-64194Jul 20, 2026Nlnetlabs

  Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which s

• 9.8 Critical severity

  Net::DNS: Improper Neutralization of Directives in Dynamically Evaluated Code

  CVE-2026-64193Jul 20, 2026NlnetlabsEPSS 1.44%

  Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDED_ERROR::_decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option (RFC 8914) by tokenising the raw bytes and passing the