CVE-2026-6949

Medium

Published: —Translated: 29/07/2026(UTC)NVD NIST

Summary

A TSIG packet with name compression can crash DNS. Incorrect size calculations when a TSIG record contains compressed names lead to a large out-of-bounds write, causing a server crash.

Risk Assessment

The risk is a DNS server crash, which could disrupt name resolution and impact network availability.

Recommendation

Apply patches from the DNS software vendor immediately and restrict the use of name compression in TSIG records.

Original NVD description (English source)

TSIG packet with name compression can crash DNS. Incorrect size calculations when a TSIG record contains compressed names can lead to a large out-of-bounds write causing the server to crash.