Important: unbound

Issue Overview: In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a malicious actor controlling a single delegated zone to...

Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2026-2033)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2033 advisory. In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the...

RockyLinux 8 : unbound (RLSA-2023:2771)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:2771 advisory. unbound: NRDelegation attack leads to uncontrolled resource consumption Non-Responsive Delegation Attack CVE-2022-3204 Tenable has extracted the preceding...

Amazon Linux 2 : unbound, --advisory ALAS2UNBOUND-1.17-2026-009 (ALASUNBOUND-1.17-2026-009)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2UNBOUND-1.17-2026-009 advisory. In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field...

Amazon Linux 2 : unbound, --advisory ALAS2-2026-3849 (ALAS-2026-3849)

The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3849 advisory. In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with...

MGASA-2026-0316 Updated unbound packages fix security vulnerabilities

Unbound packages updated to version 1.25.2 which incorporates a number of security and bug fixes...

Updated unbound packages fix security vulnerabilities

Unbound packages updated to version 1.25.2 which incorporates a number of security and bug fixes...

AlmaLinux 8 : unbound (ALSA-2026:37282)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37282 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...

CVE-2026-67328

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflect...

CVE-2026-67328 @better-auth/sso before 1.6.21 Account Takeover via SSO

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflect...

CVE-2026-67328 @better-auth/sso before 1.6.21 Account Takeover via SSO

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflect...

EUVD-2026-51839

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflect...

[SECURITY] Fedora 43 Update: unbound-1.25.2-1.fc43

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

The vulnerability of the Unbound DNS server, related to improper blocking of resources, allows a hacker to trigger a service failure.

The vulnerability of the Unbound DNS server is related to improper blocking of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Unbound DNS server, related to the computational complexity, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to the computational complexity of the algorithms involved. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Unbound DNS server, related to insufficient validation of input data and improper implementation of functions, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Unbound DNS server, related to numerical truncation errors, allows a hacker to execute arbitrary code.

The vulnerability of the Unbound DNS server is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Unbound DNS server, related to access to an uninitialized pointer, allows a hacker to cause a service failure.

The vulnerability of the Unbound DNS server relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

AlmaLinux 9 : unbound (ALSA-2026:36777)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:36777 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...

The vulnerability of the Unbound DNS server, related to excessive resource consumption during the cycle, allows a hacker to cause a service failure.

The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a malicious actor to cause service failures...