CVE-2026-55991

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...

The vulnerability of the ub_ctx_set_fwd() function in the Unbound DNS server allows a hacker to cause a service failure.

The vulnerability of the ubctxsetfwd function in the Unbound DNS server is related to the pointer to NULL being reassigned. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the Unbound DNS server, related to insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of the Unbound DNS server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2019-25041

Unbound before 1.9.5 allows an assertion failure via a compressed name in dnamepktcopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...