PolarDNS

PolarDNS is a specialized authoritative DNS server written in Python 3.x, originally developed as a tool for security testing of DNS recursive resolvers from the server-side. It allows the operator to produce custom DNS responses, making it suitable for in-depth DNS protocol testing purposes...

WAREED-DNS-C2

Wareed DNS C2 WAREED is a Command and Control C2 that utilizes the DNS protocol for secure communications between the server and the target. Designed to minimize communication and limit data exchange, it is intended to be a first-stage C2 to persist in machines that don't have access to the...

bind: BIND: Denial of Service via unbounded processing of crafted DNS messages

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending specially crafted Domain Name System DNS protocol messages containing an excessive number of specific structures. Because BIND does not impose a limit on processing these structures, handling the malicious reque...

AZL-111506 CVE-2026-19630 affecting package bind 9.20.29-1

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

ISC BIND 9 resource management error vulnerability

Versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1 of ISC BIND contain a resource management error vulnerability. This vulnerability arises because the BIND resolver fails to restrict additional processin...

Astra Linux – Vulnerability in unbound

The DNS protocol in RFC 1035 and its updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated over seconds. As a result, responses are sent in a pulsing burst, which can be considered traffic amplification in some cases. This...

Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1780912053)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780912053 advisory. - The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS...

[SECURITY] Fedora 44 Update: rust-hickory-proto-0.26.2-1.fc44

Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

[SECURITY] Fedora 45 Update: rust-hickory-proto-0.26.2-1.fc45

Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

[SECURITY] Fedora 45 Update: rust-hickory-net-0.26.2-1.fc45

Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20

CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...

CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62787

CVE-2026-62787 is a remote code execution vulnerability in Windows DNS Server caused by a use-after-free condition. An authenticated attacker could execute code over the network on a targeted host. CVSS v3.1 base score 7.5 (HIGH): AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The connected sources confirm...

EulerOS 2.0 SP13 : avahi (EulerOS-SA-2026-2321)

According to the versions of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any...

CVE-2026-5947 SIG(0) validation during query flood may lead to undefined behavior

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG0, it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached as would occur during a query...

CVE-2026-4437

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

CVE-2025-64163

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...

CVE-2025-64163

DataEase, an open source data visualization/analysis tool, has a SSRF vulnerability in version 2.10.14 and earlier due to incomplete filtering for the dns:// protocol. The blacklist only filters ldap:// and ldaps://, leaving dns:// unprotected and allowing potential server-side requests to intern...