CVE Explorer
CVE-2026-64194
Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains.
Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call stack (at least with larger TCP responses), leading to a potential Denial of Service.
The guard `$link < $offset` prevents forward and circular chains, but still allows arbitrarily long backward chains. The per-offset ca
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","packageName":"Net-DNS","product":"Net::DNS","programFiles":["lib/Net/DNS/DomainName.pm"],"programRoutines":[{"name":"Net::DNS::DomainName::decode"}],"repo":"https://www.net-dns.org/svn/net-dns/","vendor":"NLNETLABS","versions":[{"lessThanOrEqual":"1.55","status":"affected","version":"0","versionType":"custom"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:86754fa6e8a306dcc44018b0d6027c210e76c471570c47d893ec5ac215c5e3af · sha256:e0d47ccbe22f4539… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:86754fa6e8a306dcc44018b0d6027c210e76c471570c47d893ec5ac215c5e3af · sha256:e0d47ccbe22f4539… · /containers/adp/1/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-674","description":"CWE-674 Uncontrolled Recursion","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:86754fa6e8a306dcc44018b0d6027c210e76c471570c47d893ec5ac215c5e3af · sha256:e0d47ccbe22f4539… · /containers/cna/problemTypes/0/descriptions/0
Source references
4 source assertions{"url":"http://www.openwall.com/lists/oss-security/2026/07/20/13"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:86754fa6e8a306dcc44018b0d6027c210e76c471570c47d893ec5ac215c5e3af · sha256:e0d47ccbe22f4539… · /containers/adp/0/references/0
{"tags":["release-notes"],"url":"https://metacpan.org/release/NLNETLABS/Net-DNS-1.55_01/changes"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:86754fa6e8a306dcc44018b0d6027c210e76c471570c47d893ec5ac215c5e3af · sha256:e0d47ccbe22f4539… · /containers/cna/references/2
{"tags":["issue-tracking"],"url":"https://rt.cpan.org/Ticket/Display.html?id=179946"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:86754fa6e8a306dcc44018b0d6027c210e76c471570c47d893ec5ac215c5e3af · sha256:e0d47ccbe22f4539… · /containers/cna/references/1
{"url":"https://www.net-dns.org/blog/#release-candidate-for-netdns-1.56"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:86754fa6e8a306dcc44018b0d6027c210e76c471570c47d893ec5ac215c5e3af · sha256:e0d47ccbe22f4539… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.