https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:02:24.266917+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:70754 ALSA-2026:70754 — Critical: unbound security update 2026-10-04T01:02:24.637930+00:00

Affected: AlmaLinux:8: python3-unbound, AlmaLinux:8: unbound, AlmaLinux:8: unbound-devel, AlmaLinux:8: unbound-libs

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-369395 EUVD-2026-369395 2026-10-04T01:02:24.638001+00:00 EUVD-2026-369395 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81642 fkie_cve-2026-81642 2026-10-04T01:02:24.638018+00:00

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.

 https://cve.radiocsirt.org/vuln/ghsa-xxc4-rpp8-3fw7 GHSA-xxc4-rpp8-3fw7 2026-10-04T01:02:24.638045+00:00

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-81642 msrc_CVE-2026-81642 — Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY 2026-10-04T01:02:24.638063+00:00 msrc_CVE-2026-81642 https://cve.radiocsirt.org/vuln/oesa-2026-4130 OESA-2026-4130 — unbound security update 2026-10-04T01:02:24.638081+00:00

Affected: openEuler:24.03-LTS-SP4: unbound, openEuler:20.03-LTS-SP4: unbound, openEuler:22.03-LTS-SP4: unbound, openEuler:24.03-LTS-SP1: unbound, openEuler:24.03-LTS-SP3: unbound

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn't make custom builds or provide specific features to paying customers only. Security Fix(es):

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.(CVE-2026-81642)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11930-1 openSUSE-SU-2026:11930-1 — libunbound8-1.26.1-1.1 on GA media 2026-10-04T01:02:24.638116+00:00

libunbound8-1.26.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:68590 RHSA-2026:68590 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-04T01:02:24.638137+00:00

unbound: Unbound: Denial of Service via 'serve-expired' code path bypass unbound: Unbound: ZONEMD verification bypass due to asynchronous DNSSEC resolution unbound: Unbound: Denial of Service via use-after-free in DoQ stream output buffer unbound: Unbound: Denial of Service via continuous queries on TCP/DoT connection unbound: Unbound: Heap buffer overflow via malicious DNSSEC response unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis unbound: Unbound: Denial of Service via use-after-free in DoH stream cleanup unbound: Unbound: Denial of Service via algorithmic complexity attacks on DNSSEC

 https://cve.radiocsirt.org/vuln/rlsa-2026:70754 RLSA-2026:70754 — Critical: unbound security update 2026-10-04T01:02:24.638169+00:00

Affected: Rocky Linux:8: unbound

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717)

* unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634)

* unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-81642 UBUNTU-CVE-2026-81642 2026-10-04T01:02:24.638194+00:00

Affected: Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:26.04:LTS: unbound

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3392 WID-SEC-W-2026-3392 — Unbound: Mehrere Schwachstellen 2026-10-04T01:02:24.638221+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Speicher zu korrumpieren, einen Denial of Service zu verursachen oder Code auszuführen.