13 matches found
CVE-2026-40691
A flaw was found in Unbound, a domain name system DNS resolver. When Unbound is configured with DNSCrypt support, a remote attacker could send a specially crafted DNSCrypt query over TCP. This malicious query could cause a memory error, leading to a server crash and a Denial of Service DoS. This...
unbound: Packet of death with DNSCrypt
A flaw was found in Unbound. A remote attacker can exploit this vulnerability by sending a specially crafted DNSCrypt query. This malicious query, when processed, causes Unbound to read beyond its allocated memory, leading to a heap overflow. This can result in a denial of service DoS by crashing...
AZL-87015 CVE-2026-32792 affecting package unbound for versions less than 1.25.1-1
NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support '--enable-dnscrypt'. A bad DNSCrypt query could underflow Unbound's DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit...
CVE-2026-32792
Affected software : NLnet Labs Unbound 1.6.2 through 1.25.0 (with DNSCrypt support enabled via --enable-dnscrypt). Root cause : A malformed DNSCrypt query can underflow the DNSCrypt packet reading, causing Unbound to read beyond the buffer and potentially trigger a heap overflow, depending on all...
CVE-2026-32792: Improper Handling of Missing Special Element
NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support '--enable-dnscrypt'. A bad DNSCrypt query could underflow Unbound's DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit...
SUSE CVE-2026-33593
A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query...
EUVD-2026-24929
A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query...
CVE-2026-33593
A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query...
CVE-2026-33593 Denial of service via crafted DNSCrypt query
A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query...
CVE-2026-33593
A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query...
CVE-2026-33593
The provided documents describe CVE-2026-33593 as a denial-of-service caused by a client sending a crafted DNSCrypt query that triggers a divide-by-zero error and crashes the affected process. The impact is a crash (availability impact HIGH per CVSS), but the connected sources do not specify the ...