162617 matches found
MINI-85P3-64G9-QG6F
Bulletin has no description...
MINI-WRCW-GGGP-7MCM
Bulletin has no description...
MINI-9G7Q-QRGF-8VM4
Bulletin has no description...
DEBIAN-CVE-2026-56444
In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout discard-timeout 0' contrary to the suggested values, the discard-timeout branch during the serve expired logic drops an aged client reply without...
DEBIAN-CVE-2026-55717
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...
DEBIAN-CVE-2026-52863
In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that could lead to memory corruption if the owner of the original view name is jostled out when Unbound is under pressure...
DEBIAN-CVE-2026-50251
In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled set to any value greater than zero, glue records of 0.0.0.0/::0 can short-circuit Unbound, on systems that can direct such traffic, by issuing DNS queries and receiving seemingly unwanted replies...
DEBIAN-CVE-2026-50243
In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip' redirect rule or an RPZ file with an RPZ-IP trigger, the rewriting handler does not check the security status of the upstream answer...
DEBIAN-CVE-2026-40691
In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the destination buffer size. The size clamp that protects the UDP path is not applied on the TCP path, so a reply larger th...
DEBIAN-CVE-2026-14586
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic timestamps could trigger and result in server termination and thus denial of service. When interfacing with libngtcp2, for...
MINI-WC4X-Q3C8-8RQ3
Bulletin has no description...
MINI-CJW8-RJ2P-WJVF
Bulletin has no description...
MINI-9H2C-Q722-6R7X
Bulletin has no description...
MINI-G283-8QH4-MFFX
Bulletin has no description...
MINI-9R5J-PX67-HRP6
Bulletin has no description...
MINI-QPH9-PVRW-7G5J
Bulletin has no description...
MINI-RM7M-HMX6-4JFV
Bulletin has no description...
MINI-6PQ7-M66G-62J2
Bulletin has no description...