MEDIUM
CVE-2026-42388
CVSS
5.9
Description
Incomplete validation of the SOA record present in a catalog zone might lead to a crash.
Summary dbcve.org
This is a denial-of-service vulnerability in DNS server software where incomplete validation of the SOA (Start of Authority) record present in a catalog zone can cause the server to crash. Catalog zones are used for zone provisioning in DNS implementations.
Mitigation
Apply the vendor-supplied patch or update to the DNS server software to ensure proper validation of SOA records in catalog zones.
Weakness (CWE)
CWE-20
Improper Input Validation
EPSS Score
0.39%
Probability of exploitation in next 30 days
32.5th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.