https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:16:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-319582 EUVD-2026-319582 https://cve.radiocsirt.org/vuln/euvd-2026-319582 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32792 <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;). A bad DNSCrypt query could underflow Unbound&#39;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &#39;0x00&#39; bytes and does not contain the expected &#39;0x80&#39; marker. Unbound would then start reading more bytes than necessary until it finds a non-&#39;0x00&#39; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&#39;s later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.</p> <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;). A bad DNSCrypt query could underflow Unbound&#39;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &#39;0x00&#39; bytes and does not contain the expected &#39;0x80&#39; marker. Unbound would then start reading more bytes than necessary until it finds a non-&#39;0x00&#39; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&#39;s later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-32792 https://cve.radiocsirt.org/vuln/ghsa-8v34-57vr-p4cp <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;). A bad DNSCrypt query could underflow Unbound&#39;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &#39;0x00&#39; bytes and does not contain the expected &#39;0x80&#39; marker. Unbound would then start reading more bytes than necessary until it finds a non-&#39;0x00&#39; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&#39;s later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.</p> <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;). A bad DNSCrypt query could underflow Unbound&#39;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &#39;0x00&#39; bytes and does not contain the expected &#39;0x80&#39; marker. Unbound would then start reading more bytes than necessary until it finds a non-&#39;0x00&#39; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&#39;s later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.</p> https://cve.radiocsirt.org/vuln/ghsa-8v34-57vr-p4cp https://cve.radiocsirt.org/vuln/msrc_cve-2026-32792 msrc_CVE-2026-32792 https://cve.radiocsirt.org/vuln/msrc_cve-2026-32792 https://cve.radiocsirt.org/vuln/oesa-2026-2606 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: unbound</p> <p>Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn&amp;amp;apos;t make custom builds or provide specific features to paying customers only. Security Fix(es):</p> <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&amp;apos;--enable-dnscrypt&amp;apos;). A bad DNSCrypt query could underflow Unbound&amp;apos;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &amp;apos;0x00&amp;apos; bytes and does not contain the expected &amp;apos;0x80&amp;apos; marker. Unbound would then start reading more bytes than necessary until it finds a non-&amp;apos;0x00&amp;apos; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&amp;apos;s later packet checks will deny the packe…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: unbound</p> <p>Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn&amp;amp;apos;t make custom builds or provide specific features to paying customers only. Security Fix(es):</p> <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&amp;apos;--enable-dnscrypt&amp;apos;). A bad DNSCrypt query could underflow Unbound&amp;apos;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &amp;apos;0x00&amp;apos; bytes and does not contain the expected &amp;apos;0x80&amp;apos; marker. Unbound would then start reading more bytes than necessary until it finds a non-&amp;apos;0x00&amp;apos; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&amp;apos;s later packet checks will deny the packe…</p> https://cve.radiocsirt.org/vuln/oesa-2026-2606 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10903-1 <p>libunbound8-1.25.1-1.1 on GA media</p> <p>libunbound8-1.25.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10903-1 https://cve.radiocsirt.org/vuln/rhsa-2026:20357 <p>unbound: Packet of death with DNSCrypt unbound: Unbound: Cache manipulation via &#39;ghost domain names&#39; attack unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance</p> <p>unbound: Packet of death with DNSCrypt unbound: Unbound: Cache manipulation via &#39;ghost domain names&#39; attack unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance</p> https://cve.radiocsirt.org/vuln/rhsa-2026:20357 https://cve.radiocsirt.org/vuln/suse-su-2026:21874-1 <p>Security update for unbound</p> <p>Security update for unbound</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21874-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32792 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:25.10: unbound, Ubuntu:26.04:LTS: unbound</p> <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;). A bad DNSCrypt query could underflow Unbound&#39;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &#39;0x00&#39; bytes and does not contain the expected &#39;0x80&#39; marker. Unbound would then start reading more bytes than necessary until it finds a non-&#39;0x00&#39; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&#39;s later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:25.10: unbound, Ubuntu:26.04:LTS: unbound</p> <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;). A bad DNSCrypt query could underflow Unbound&#39;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &#39;0x00&#39; bytes and does not contain the expected &#39;0x80&#39; marker. Unbound would then start reading more bytes than necessary until it finds a non-&#39;0x00&#39; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&#39;s later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32792 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1599 <p>Ein Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um einen Denial of Service Zustand herbeizuführen, um möglicherweise Code auszuführen und um nicht näher spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um einen Denial of Service Zustand herbeizuführen, um möglicherweise Code auszuführen und um nicht näher spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1599