PT-2026-87747

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

PT-2026-87716

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an unauthorized attacker to execute arbitrary code over a network and...

CVE-2026-77505: Use After Free

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69782: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69989: Use After Free

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69827: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

PT-2026-87786

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

Dnsmasq extract_addresses() DoS

The vulnerability of the extractaddresses function in the DNS server library Dnsmasq is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Dnsmasq Unauthorized Access

The vulnerability of the DNS server Dnsmasq is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

tinydns v0.0.109

Description embeddable dns server...

s3dns v0.2.28

S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...

TSIG Authentication Privilege Escalation

The vulnerability of the TSIG authentication algorithm used by coredns DNS servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Windows DNS Code Execution

The vulnerability of DNS servers on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

[SECURITY] Fedora 44 Update: bind-9.18.50-2.fc44

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 43 Update: bind-9.18.50-2.fc43

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

K000163143: Multiple CoreDNS vulnerabilities CVE-2026-35579, CVE-2026-33489, CVE-2026-33190, CVE-2026-32934, CVE-2026-32936

Security Advisory Description CVE-2026-35579 CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server checks whether the TSIG key name exists in the configurati...

[SECURITY] Fedora 44 Update: knot-3.5.7-1.fc44

Knot DNS is a high-performance authoritative DNS server implementation...

CoreDNS DNS Server Unauthenticated Access

The vulnerability of the longestMatch function in the plugin/transfer/transfer.go file of the CoredNS DNS server is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

DNS-over-QUIC Plugin DoS

The vulnerability of the DNS-over-QUIC DoQ plugin of the coredns DNS server is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Coredns Privilege Escalation

The vulnerability of the Coredns DNS server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to increase their privileges...