UBUNTU-CVE-2026-33608

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-33608

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33608.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-33608

Upstream

CVE-2026-33608

Published

2026-04-22T14:16:00Z

Modified

2026-05-20T16:25:31.532560749Z

Severity

7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it.

References

Affected packages

Ubuntu:24.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.8.1-1build1

4.8.3-2

4.8.3-2build1

4.8.3-3

4.8.3-4

4.8.3-4build2

4.8.3-4build3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-bind"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-geoip"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-ldap"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-lmdb"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-lua2"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-mysql"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-odbc"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-pgsql"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-pipe"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-remote"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-sqlite3"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-backend-tinydns"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-ixfrdist"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-server"
        },
        {
            "binary_version": "4.8.3-4build3",
            "binary_name": "pdns-tools"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33608.json"

Ubuntu:25.10

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.9.4-2

4.9.7-1

4.9.7-1build2

5.*

5.0.0-2

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-bind"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-geoip"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-ldap"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-lmdb"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-lua2"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-mysql"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-odbc"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-pgsql"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-pipe"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-remote"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-sqlite3"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-backend-tinydns"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-ixfrdist"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-server"
        },
        {
            "binary_version": "5.0.0-2",
            "binary_name": "pdns-tools"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33608.json"

Ubuntu:26.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-2

5.0.1-1

5.0.2-1

5.0.2-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-bind"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-geoip"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-ldap"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-lmdb"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-lua2"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-mysql"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-odbc"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-pgsql"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-pipe"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-remote"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-sqlite3"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-backend-tinydns"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-ixfrdist"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-server"
        },
        {
            "binary_version": "5.0.2-1build1",
            "binary_name": "pdns-tools"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33608.json"

Ubuntu:Pro:16.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=esm-apps%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.4.5-1build2

3.4.6-2

3.4.6-3

3.4.7-1

3.4.7-2

4.*

4.0.0~alpha1-1

4.0.0~alpha2-2

4.0.0~alpha2-3

4.0.0~alpha2-3build1

4.0.0~alpha2-3ubuntu0.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-geoip"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-ldap"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-lua"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-mydns"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-mysql"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-pgsql"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-pipe"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-remote"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-sqlite3"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-backend-tinydns"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-server"
        },
        {
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1",
            "binary_name": "pdns-tools"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33608.json"

Ubuntu:Pro:18.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=esm-apps%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.4-2

4.0.4-2build1

4.0.5-1

4.1.0-1

4.1.0-2

4.1.0-2build1

4.1.1-1

4.1.1-1ubuntu0.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-bind"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-geoip"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-ldap"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-lua"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-mydns"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-mysql"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-odbc"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-opendbx"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-pgsql"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-pipe"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-remote"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-sqlite3"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-tinydns"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-server"
        },
        {
            "binary_version": "4.1.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-tools"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33608.json"

Ubuntu:Pro:20.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=esm-apps%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.1.6-3build1

4.2.0-1

4.2.1-1

4.2.1-1build1

4.2.1-1build2

4.2.1-1ubuntu0.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-bind"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-geoip"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-ldap"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-lua"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-mydns"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-mysql"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-odbc"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-pgsql"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-pipe"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-remote"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-sqlite3"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-tinydns"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-ixfrdist"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-server"
        },
        {
            "binary_version": "4.2.1-1ubuntu0.1~esm1",
            "binary_name": "pdns-tools"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33608.json"

Ubuntu:Pro:22.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=esm-apps%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.1-1build1

4.4.1-3

4.4.1-4

4.5.2-1build1

4.5.3-1

4.5.3-1ubuntu0.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-bind"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-geoip"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-ldap"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-lmdb"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-lua2"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-mysql"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-odbc"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-pgsql"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-pipe"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-remote"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-sqlite3"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-backend-tinydns"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-ixfrdist"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-server"
        },
        {
            "binary_version": "4.5.3-1ubuntu0.1~esm1",
            "binary_name": "pdns-tools"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33608.json"