OESA-2026-3627

Dashboard / Vulnerabilities / OESA-2026-3627

OESA-2026-3627

Summary: perl-Net-DNS security update

Details: Net :: DNS is a collection of Perl's Domain Name System resolvers. It allows programmers to perform DNS queries for gethostbyname and gethostbyaddr functions. Security Fix(es): Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDED_ERROR::_decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option (RFC 8914) by tokenising the raw bytes and passing the result to Perl's eval. There is some escaping done for $ and @, but not for backticks. This can be exploited for command execution if $pkt->edns->option('EXTENDED-ERROR') is called in array context, for example with a payload of {0:`"<command>"`} in EXTRA-TEXT.(CVE-2026-64193)

References: https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3627, https://nvd.nist.gov/vuln/detail/CVE-2026-64193