62 matches found
CVE-2026-32945
CVE-2026-32945 PJSIP DNS Compression Pointer Heap OOB Read Remote DoS Description getnamelen and getname in pjlib-util/src/pjlib-util/dns.c read a 2-byte DNS compression pointer via pjmemcpy&offset, p, 2 without checking that both bytes lie within the packet buffer. When a 0xC0 byte compression...
SUSE CVE-2026-96405
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...
CVE-2026-114605
A flaw was found in dnspython. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Domain Name System DNS message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed...
Red Hat: CVE-2026-114605: dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal
dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...
AZL-110534 CVE-2026-96405 affecting package unbound 1.26.1-1
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...
CVE-2026-96405
NLnet Labs Unbound versions up to and including 1.26.1 are vulnerable to a resource exhaustion issue. While the software limits compression-pointer traversal for individual domain-name operations, it lacks an aggregate inbound decompression-work budget . An attacker with recursive-query access an...
CVE-2026-96405 Aggregate DNS name chained pointer decompression work leads to degradation of service.
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...
EUVD-2026-107153
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...
CentOS Linux 8 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs (CENTOS-STREAM8:CLSA-2026:1790264021)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1790264021 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and...
Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1790264968)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790264968 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and...
UBUNTU-CVE-2026-69184
c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...
CVE-2026-69184
c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...
Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2026-3101)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3101 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A...
DEBIAN-CVE-2026-81642
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...
UBUNTU-CVE-2026-81642
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...
CVE-2026-81642
NLnet Labs Unbound (up to and including 1.26.0 ) contains a heap buffer overflow in the DNSSEC validator when digesting DNSKEY records. A DNSKEY with an owner compression pointer referencing its own RDATA can overflow the digest buffer, enabling denial of service and possible remote code executio...
CVE-2026-81642
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...
OESA-2026-3867 ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder...
OESA-2026-3866 ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder...
[SECURITY] [DLA 4761-1] libnet-dns-perl security update
Debian LTS Advisory DLA-4761-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 30, 2026 https://wiki.debian.org/LTS Package : libnet-dns-perl Version : 1.29-1+deb11u1 1.36-1+deb12u1 CVE ID : CVE-2026-64194 Debian Bug : 1142503 Steffen Ullrich discovered that...