https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:31:43 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:70754 <p><strong>Affected:</strong> AlmaLinux:8: python3-unbound, AlmaLinux:8: unbound, AlmaLinux:8: unbound-devel, AlmaLinux:8: unbound-libs</p> <p>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.</p> <p>Security Fix(es):</p> <p>* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: python3-unbound, AlmaLinux:8: unbound, AlmaLinux:8: unbound-devel, AlmaLinux:8: unbound-libs</p> <p>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.</p> <p>Security Fix(es):</p> <p>* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717) * unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634) * unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:70754 https://cve.radiocsirt.org/vuln/euvd-2026-369397 EUVD-2026-369397 https://cve.radiocsirt.org/vuln/euvd-2026-369397 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81634 <p>In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.</p> <p>In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-81634 https://cve.radiocsirt.org/vuln/ghsa-x9ff-rj4v-x6mq <p>In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.</p> <p>In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-x9ff-rj4v-x6mq https://cve.radiocsirt.org/vuln/msrc_cve-2026-81634 msrc_CVE-2026-81634 https://cve.radiocsirt.org/vuln/msrc_cve-2026-81634 https://cve.radiocsirt.org/vuln/oesa-2026-4148 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: unbound</p> <p>Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn&amp;amp;apos;t make custom builds or provide specific features to paying customers only. Security Fix(es):</p> <p>In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolizes a single worker&amp;apos;s entire event loop for as long as its writes stay ahead of the drain.(CVE-2026-80225)</p> <p>In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.(CVE-2026-81634)</p> <p>In NLnet Labs Unbound up to and including 1.26.0, a vulnerabil…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: unbound</p> <p>Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn&amp;amp;apos;t make custom builds or provide specific features to paying customers only. Security Fix(es):</p> <p>In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolizes a single worker&amp;apos;s entire event loop for as long as its writes stay ahead of the drain.(CVE-2026-80225)</p> <p>In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.(CVE-2026-81634)</p> <p>In NLnet Labs Unbound up to and including 1.26.0, a vulnerabil…</p> https://cve.radiocsirt.org/vuln/oesa-2026-4148 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11930-1 <p>libunbound8-1.26.1-1.1 on GA media</p> <p>libunbound8-1.26.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11930-1 https://cve.radiocsirt.org/vuln/rhsa-2026:68590 <p>unbound: Unbound: Denial of Service via &#39;serve-expired&#39; code path bypass unbound: Unbound: ZONEMD verification bypass due to asynchronous DNSSEC resolution unbound: Unbound: Denial of Service via use-after-free in DoQ stream output buffer unbound: Unbound: Denial of Service via continuous queries on TCP/DoT connection unbound: Unbound: Heap buffer overflow via malicious DNSSEC response unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis unbound: Unbound: Denial of Service via use-after-free in DoH stream cleanup unbound: Unbound: Denial of Service via algorithmic complexity attacks on DNSSEC</p> <p>unbound: Unbound: Denial of Service via &#39;serve-expired&#39; code path bypass unbound: Unbound: ZONEMD verification bypass due to asynchronous DNSSEC resolution unbound: Unbound: Denial of Service via use-after-free in DoQ stream output buffer unbound: Unbound: Denial of Service via continuous queries on TCP/DoT connection unbound: Unbound: Heap buffer overflow via malicious DNSSEC response unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis unbound: Unbound: Denial of Service via use-after-free in DoH stream cleanup unbound: Unbound: Denial of Service via algorithmic complexity attacks on DNSSEC</p> https://cve.radiocsirt.org/vuln/rhsa-2026:68590 https://cve.radiocsirt.org/vuln/rlsa-2026:70754 <p><strong>Affected:</strong> Rocky Linux:8: unbound</p> <p>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.</p> <p>Security Fix(es):</p> <p>* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717)</p> <p>* unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634)</p> <p>* unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:8: unbound</p> <p>The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.</p> <p>Security Fix(es):</p> <p>* unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis (CVE-2026-82717)</p> <p>* unbound: Unbound: Heap buffer overflow via malicious DNSSEC response (CVE-2026-81634)</p> <p>* unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVE-2026-81642)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:70754 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-81634 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:26.04:LTS: unbound</p> <p>In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:26.04:LTS: unbound</p> <p>In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-81634 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3392 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Speicher zu korrumpieren, einen Denial of Service zu verursachen oder Code auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Speicher zu korrumpieren, einen Denial of Service zu verursachen oder Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3392