dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal

A flaw was found in dnspython. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Domain Name System DNS message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed...

Important: Red Hat Security Advisory: python-dns security update

An update for python-dns is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

python-dns security update

1.15.0-13 - CVE-2026-114605 python-dns: dnspython: Denial of Service via excessive DNS compression pointer traversal Resolves: RHEL-290592...

CVE-2026-32945

CVE-2026-32945 PJSIP DNS Compression Pointer Heap OOB Read Remote DoS Description getnamelen and getname in pjlib-util/src/pjlib-util/dns.c read a 2-byte DNS compression pointer via pjmemcpy&offset, p, 2 without checking that both bytes lie within the packet buffer. When a 0xC0 byte compression...

Important: python-dns

Issue Overview: dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use,...

SUSE CVE-2026-96405

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

CVE-2026-114605

A flaw was found in dnspython. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Domain Name System DNS message containing excessive compression pointer chains. Because the parser does not enforce a hop limit during name decompression, processing these malformed...

Red Hat: CVE-2026-114605: dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

AZL-110534 CVE-2026-96405 affecting package unbound for versions less than 1.26.2-1

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

EUVD-2026-107153

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

CVE-2026-96405

NLnet Labs Unbound versions up to and including 1.26.1 are vulnerable to a resource exhaustion issue. While the software limits compression-pointer traversal for individual domain-name operations, it lacks an aggregate inbound decompression-work budget . An attacker with recursive-query access an...

CVE-2026-96405 Aggregate DNS name chained pointer decompression work leads to degradation of service.

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

Amazon Linux 2023: CVE-2026-96405: Medium priority package update for unbound

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

PT-2026-134539

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1790264968)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790264968 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and...

CentOS Linux 8 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs (CENTOS-STREAM8:CLSA-2026:1790264021)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1790264021 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and...

UBUNTU-CVE-2026-69184

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

CVE-2026-69184

c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...

Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2026-3101)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3101 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A...

DEBIAN-CVE-2026-81642

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...