CVE-2026-42389

Reject more queries with invalid header values

Medium · published June 25, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Published
2026-06-25T13:16Z
EPSS history
Timeline
  • 25 JUN 13:16Z
    Reject more queries with invalid header values
    cvelistv5