一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-64194 [HIGH] – Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression p

未分类
📑 文章目录

Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains.

Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call stack (at least with larger TCP responses), leading to a potential Denial of Service.

The guard `$link new($wire)` i.e. any point where the library decodes a DNS message from the network.