These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-81928 is a high-severity vulnerability affecting Net::DNS versions before 1.57 for Perl. It allows memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. This issue is particularly concerning for systems that re-encode decoded messages, such as forwarders or proxies. The vulnerability is triggered when a decoded TSIG carries an empty MAC, le [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-20T19:17:30.157Z and has not been modified since then. Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains due to unlimited recursion in Net::DNS::DomainName::decode. The guard `$link < $offset` prevents forward and circular chains, but still allow [truncated]
CVE-2026-49235 is a HIGH severity vulnerability in Routinator, a software developed by Nlnetlabs. The vulnerability occurs when Routinator encounters a file via RRDP (Resource Public Key Infrastructure Repository Delta Protocol) using a specifically crafted Document Type Definition, causing the software to crash. The vulnerability has a CVSS score of 8.7 and was published on 2026-06-08T15:16:48.350Z.
CVE-2026-49233 is a HIGH-severity vulnerability in Routinator, a software developed by Nlnetlabs. The vulnerability has a CVSS score of 8.3 and was published on 2026-06-08. The issue arises from Routinator's improper handling of the module component in rsync URIs, which can lead to path traversal attacks. This vulnerability potentially allows an attacker to access the entire Routinator rsync cache.
CVE-2016-6173 is a remote availability issue in NSD affecting versions before 4.1.11. According to NVD, a DNS master server can trigger denial of service on a slave server by sending a zone transfer with unlimited data, leading to /tmp disk consumption and a possible slave server crash. The published CVSS v3 vector rates this as network-reachable, low-complexity, no-authentication, and high availability impact.