Lucene search
+L

76171 matches found

OSV
OSV
added 2026/07/22 2:17 p.m.4 views

UBUNTU-CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/22 2:15 p.m.13 views

CVE-2026-13204

CVE-2026-13204 affects BIND 9 up to 9.18.50, 9.20.24, 9.21.23 and related S1 variants. If a provably insecure domain is covered by both NSEC and NSEC3 at the parent and an RRSIG exists for only one type, BIND may exit unexpectedly with an assertion during proof validation. Mitigation is to upgrad...

7.5CVSS5.3AI score0.00509EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/22 2:15 p.m.5 views

CVE-2026-13204 Unexpected exit in certain situations with NSEC and NSEC3 both present

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through...

7.5CVSS5.2AI score0.00509EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/07/22 2:15 p.m.11 views

unbound: Unbound: Denial of Service via crafted DNSCrypt query

A flaw was found in Unbound, a domain name system DNS resolver. When Unbound is configured with DNSCrypt support, a remote attacker could send a specially crafted DNSCrypt query over TCP. This malicious query could cause a memory error, leading to a server crash and a Denial of Service DoS. This...

7.5CVSS5.5AI score0.00293EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/22 2:15 p.m.9 views

unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option

A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/22 2:10 p.m.28 views

CVE-2026-11331

CVE-2026-11331 affects BIND 9 with RPZ wildcards (CNAME policies). An attacker who can guess/know that a resolver uses RPZ can craft very long query names to cause NAMETOOLONG during RPZ processing, potentially defeating the RPZ rule or causing an unexpected exit in BIND 9. Affected versions incl...

7.5CVSS5.3AI score0.00416EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/22 2:10 p.m.8 views

EUVD-2026-47706

An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of...

7.5CVSS5.3AI score0.00416EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/22 2:10 p.m.8 views

CVE-2026-11331

An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of...

7.5CVSS5.3AI score0.00416EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2026/07/22 2:9 p.m.8 views

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

6.5CVSS5.8AI score0.00371EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/22 2:9 p.m.42 views

CVE-2026-10822 Key Record using PRIVATEDNS algorithm may lead to unexpected exit

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

6.5CVSS0.00371EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/22 1:52 p.m.3 views

SUSE-SU-2026:22810-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. - CVE-2026-31503: udp: Fix wildcard bind...

9.8CVSS7.2AI score0.03234EPSS
SaveExploits8References181
CVE
CVE
added 2026/07/22 1:10 p.m.138 views

CVE-2026-55991

CVE-2026-55991 affects NLnet Labs Unbound 1.22.0–1.25.1. A remote unauthenticated DoQ client can trigger a libngtcp2 assertion by passing an erroneous error value when ngtcp2_conn_writev_stream() returns NGTCP2_ERR_STREAM_DATA_BLOCKED and Unbound calls ngtcp2_ccerr_set_application_error() with -1...

5.9CVSS5.4AI score0.00237EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/22 1:10 p.m.37 views

CVE-2026-55991 Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...

5.9CVSS0.00237EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 1:10 p.m.10 views

EUVD-2026-47683

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...

5.9CVSS5.4AI score0.00237EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/22 1:9 p.m.43 views

CVE-2026-55973

CVE-2026-55973 affects NLnet Labs Unbound 1.23.0 through 1.25.1. When dns-error-reporting: yes is enabled, the EDNS Report-Channel option (code 18) length from the last upstream response is treated as the length of the agent domain. If the agent domain contains garbage after the domain, those byt...

7.5CVSS5.4AI score0.00291EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/22 1:9 p.m.38 views

CVE-2026-55973 'dns-error-reporting: yes' leads to stack buffer overflow

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS0.00291EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 1:9 p.m.7 views

EUVD-2026-47681

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.3AI score0.00291EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/07/22 1:9 p.m.13 views

CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.3AI score0.00291EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/22 1:9 p.m.7 views

CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.3AI score0.00291EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/22 1:9 p.m.9 views

CVE-2026-55973 'dns-error-reporting: yes' leads to stack buffer overflow

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.3AI score0.00291EPSS
SaveExploits0References1
Rows per page
Query Builder