44655 matches found
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-52684
If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...
CVE-2026-52686
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
PQC Migration Now Has a Deadline. Does Your DNS Estate?
Learn why crypto-agility depends not just on adopting the right standards, but on maintaining a clear, unified view of your DNS environment before the migration begins...
USN-8597-1: Linux kernel (IBM) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries
...
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
...
Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
...
DNS Cookie bypass when combined with proxy-protocol use
...
Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
EUVD-2026-47930
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-52688 RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
...
CVE-2026-52686
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
CVE-2026-52686 Wildcard CNAME proof validation bypass
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
CVE-2026-52686
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
CVE-2026-52686 Wildcard CNAME proof validation bypass
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
'max-global-quota' reset by DNSSEC validation restarts
...
EUVD-2026-47932
If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...