DSA-6459-1 libnet-dns-perl - security update

unknownCVE-2026-64193 CVE-2026-64194

Two vulnerabilities were discovered in libnet-dns-perl, a Perl module to perform DNS queries, which could result in denial of service or remote code execution. https://security-tracker.debian.org/tracker/DSA-6459-1

CSIRTS triage

vendor: Perl product: libnet-dns-perl Denial of service Remote code execution

What: Two vulnerabilities in the Perl DNS module could allow denial of service or remote code execution.
Who is affected: Perl applications and systems using libnet-dns-perl for DNS operations.
Urgency: Remediate immediately due to remote code execution vulnerability.
Action: Update libnet-dns-perl to the patched version from DSA-6459-1.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch libnet-dns-perl

Get an email when a new libnet-dns-perl advisory drops — max one per day, one-click unsubscribe.

Details

Source: Debian Security Advisories (INTL · vendor-psirt · site)
Severity: unknown
Published: 2026-08-22
Exploitation: Not in CISA KEV at last sync

Original advisory: https://lists.debian.org/debian-security-announce/2026/msg00370.html

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-641930.83% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 54% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-641940.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-64193	coverage & exploitation status	NVD · CVE.org
CVE-2026-64194	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.