UBUNTU-CVE-2026-33611

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-33611

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33611.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-33611

Upstream

CVE-2026-33611

Published

2026-04-22T14:16:00Z

Modified

2026-05-20T16:25:31.210257839Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.

References

Affected packages

Ubuntu:24.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.8.1-1build1

4.8.3-2

4.8.3-2build1

4.8.3-3

4.8.3-4

4.8.3-4build2

4.8.3-4build3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "pdns-backend-bind",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-geoip",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-ldap",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-lmdb",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-lua2",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-mysql",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-odbc",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-pgsql",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-pipe",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-remote",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-sqlite3",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-backend-tinydns",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-ixfrdist",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-server",
            "binary_version": "4.8.3-4build3"
        },
        {
            "binary_name": "pdns-tools",
            "binary_version": "4.8.3-4build3"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33611.json"

Ubuntu:25.10

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.9.4-2

4.9.7-1

4.9.7-1build2

5.*

5.0.0-2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "pdns-backend-bind",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-geoip",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-ldap",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-lmdb",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-lua2",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-mysql",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-odbc",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-pgsql",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-pipe",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-remote",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-sqlite3",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-backend-tinydns",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-ixfrdist",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-server",
            "binary_version": "5.0.0-2"
        },
        {
            "binary_name": "pdns-tools",
            "binary_version": "5.0.0-2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33611.json"

Ubuntu:26.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-2

5.0.1-1

5.0.2-1

5.0.2-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "pdns-backend-bind",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-geoip",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-ldap",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-lmdb",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-lua2",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-mysql",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-odbc",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-pgsql",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-pipe",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-remote",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-sqlite3",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-backend-tinydns",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-ixfrdist",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-server",
            "binary_version": "5.0.2-1build1"
        },
        {
            "binary_name": "pdns-tools",
            "binary_version": "5.0.2-1build1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33611.json"

Ubuntu:Pro:16.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=esm-apps%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.4.5-1build2

3.4.6-2

3.4.6-3

3.4.7-1

3.4.7-2

4.*

4.0.0~alpha1-1

4.0.0~alpha2-2

4.0.0~alpha2-3

4.0.0~alpha2-3build1

4.0.0~alpha2-3ubuntu0.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "pdns-backend-geoip",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-ldap",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-lua",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-mydns",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-mysql",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-pgsql",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-pipe",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-remote",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-sqlite3",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-tinydns",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-server",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-tools",
            "binary_version": "4.0.0~alpha2-3ubuntu0.1~esm1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33611.json"

Ubuntu:Pro:18.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=esm-apps%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.4-2

4.0.4-2build1

4.0.5-1

4.1.0-1

4.1.0-2

4.1.0-2build1

4.1.1-1

4.1.1-1ubuntu0.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "pdns-backend-bind",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-geoip",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-ldap",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-lua",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-mydns",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-mysql",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-odbc",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-opendbx",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-pgsql",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-pipe",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-remote",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-sqlite3",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-tinydns",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-server",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-tools",
            "binary_version": "4.1.1-1ubuntu0.1~esm1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33611.json"

Ubuntu:Pro:20.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=esm-apps%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.1.6-3build1

4.2.0-1

4.2.1-1

4.2.1-1build1

4.2.1-1build2

4.2.1-1ubuntu0.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "pdns-backend-bind",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-geoip",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-ldap",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-lua",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-mydns",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-mysql",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-odbc",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-pgsql",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-pipe",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-remote",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-sqlite3",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-tinydns",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-ixfrdist",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-server",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-tools",
            "binary_version": "4.2.1-1ubuntu0.1~esm1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33611.json"

Ubuntu:Pro:22.04:LTS

pdns

Package

Name: pdns
Purl: pkg:deb/ubuntu/pdns?arch=source&distro=esm-apps%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.1-1build1

4.4.1-3

4.4.1-4

4.5.2-1build1

4.5.3-1

4.5.3-1ubuntu0.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "pdns-backend-bind",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-geoip",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-ldap",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-lmdb",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-lua2",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-mysql",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-odbc",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-pgsql",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-pipe",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-remote",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-sqlite3",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-backend-tinydns",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-ixfrdist",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-server",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "pdns-tools",
            "binary_version": "4.5.3-1ubuntu0.1~esm1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-33611.json"