CVE-2026-123600

Hickory DNS components hickory-proto (versions 0.25.0-alpha.3 through 0.25.2) and hickory-net (versions 0.26.0-alpha.1 before 0.26.2) are affected by a DNSSEC validation flaw in DnssecDnsHandle . The vulnerability allows the system to incorrectly accept NSEC3-signed NODATA responses for zone-apex...

CVE-2026-123595

The Hickory DNS validating recursor contains a DNSSEC validation flaw in the NSEC3 handler affecting hickory-proto versions 0.25 through 0.26.0-alpha.1 and hickory-net versions 0.26.0-beta.1 before 0.26.2. The root cause is that the handler matches the closest encloser by hash alone without verif...

CVE-2026-123582

The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) versions 0.25.0 before 0.26.2 are vulnerable to a DNSSEC validation bypass . The root cause is that the software fails to verify if the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA...

CVE-2026-123579

DNSSEC validation in Hickory DNS (specifically hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1) is vulnerable to a validation bypass due to how wildcard expansions are handled. The root cause is that the software fails to distinguish NODATA responses from wildcard...

CVE-2026-72069

creationtimestamp| type| source ---|---|--- 2026-08-17 07:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtb5zvlr2r2e 2026-09-02 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260902 2026-10-01 18:00:00+00:00|...

CVE-2026-53472

creationtimestamp| type| source ---|---|--- 2026-08-14 15:11:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bx2okyyvpee76...

CVE-2026-71193

In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...

curl: DNS domain search list followed for extant domain missing A or AAAA records

Summary: Curl calls getaddrinfo to resolve a domain's addresses, however glibc will continue though the domain search list to find data even if it gets a NODATA response. When using AFUNSPEC in the aihints, this search will stop at the first domain with either an A or AAAA record, however when...

EUVD-2017-6570

Malware in sbrugna...

FreeBSD : zeek -- potential DoS vulnerabilities (96d6809a-81df-46d4-87ed-2f78c79f06b1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 96d6809a-81df-46d4-87ed-2f78c79f06b1 advisory. - Tim Wojtulewicz of Corelight reports: Receiving DNS responses from async DNS requests via A...

Security update for nsd (moderate)

openSUSE Security Update: Security update for nsd Announcement ID: openSUSE-SU-2020:2222-1 Rating: moderate References: 1157331 1179191 Cross-References: CVE-2019-13207 CVE-2020-28935 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2019-2194)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-15105

A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence NXDOMAIN answer of an existing wildcard record, or trick unbound into accepting a NODATA proof...

CVE-2017-15105: Improperly Implemented Security Check for Standard

A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence NXDOMAIN answer of an existing wildcard record, or trick unbound into accepting a NODATA proof...

PT-2018-5765

Name of the Vulnerable Software and Affected Versions: unbound versions prior to 1.6.8 Description: A flaw was found in the way unbound validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence of an existing wildcard record...