CLEANSTART-2025-OS10594

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-OS10594.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2025-OS10594
Upstream
Published
2026-10-31T13:59:15Z
Modified
2026-10-31T16:03:35Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing
Details

Security vulnerability affects the bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing.

References

Affected packages

CleanStart / bind

Package

Name
bind
Purl
pkg:apk/cleanstart/bind

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.18.19-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-OS10594.json"