2264 matches found
DEBIAN-CVE-2026-11605
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...
DEBIAN-CVE-2026-10822
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...
MINI-C2XR-4VMF-49XX
Bulletin has no description...
MINI-3M48-VRC9-5229
Bulletin has no description...
DEBIAN-CVE-2026-44690
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a malicious actor controlling a single delegated zone to poison arbitrary...
DEBIAN-CVE-2026-41637
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC DoQ queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight resolution queries. This results in degradation of resolution service f...
MINI-R6QG-8RVW-787X
Bulletin has no description...
MINI-87P3-7PP5-7W6V
Bulletin has no description...
MINI-C2M4-7M47-3VFF
Bulletin has no description...
MINI-RHQP-HH88-W9F5
Bulletin has no description...
MINI-64P9-6559-7376
Bulletin has no description...
MINI-659J-PX9H-J448
Bulletin has no description...
CVE-2026-55991
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...
DEBIAN-CVE-2026-50713
Bulletin has no description...
BELL-CVE-2026-44973
Bulletin has no description...
BELL-CVE-2026-64165
Bulletin has no description...
BELL-CVE-2026-64034
Bulletin has no description...
BELL-CVE-2026-63819
Bulletin has no description...