CVE-2026-50046

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS DoT forwarded queries is tied to a struct's 'servicedquery' lifetime but also referenced by another struct 'waitingtcp'. When the owning struct is jostled out of the mesh while the DoT TCP stream is...

CVE-2026-54478

CVE-2026-54478 affects NLnet Labs Unbound 1.18.0–1.25.1 when listening on a proxy-protocol-port with answer-cookie enabled. The RFC 9018 server-cookie (SipHash) is computed over the proxy’s wire address rather than the PROXYv2-declared client, causing a server cookie to validate for every PROXYv2...

CVE-2026-52863

The CVE concerns NLnet Labs Unbound 1.25.0–1.25.1. A fix that enables coexistence of the respip and dns64 modules creates a shallow copy of the view name, which, under pressure when a configured access-control-view is active and subqueries (respip CNAME redirection, dns64, subnetcache) are attach...

CVE-2026-50046

NLnet Labs Unbound 1.15.0–1.25.1 contains a heap use-after-free in the DoT path. The TLS server name for DoT forwarded queries is tied to a serviced_query object that is also referenced by waiting_tcp. If the owning struct is jostled out of the mesh while DoT TCP handshake is in progress, freeing...

CVE-2026-46582

Affected software/versions: NLnet Labs Unbound 1.6.0 up to and including 1.25.1. Issue: a replay of a wildcard RRset as another piece of data can be momentarily treated as DNSSEC secure based on RRSIG validation and cached, then misvalidated on the serve-expired path due to later NSEC validation,...

CVE-2026-44687 Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN

In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be shadowed by the intermediate label's secure NXDOMAIN answer from the parent. This is caused by an off-by-one error in...

PT-2026-63392

In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the address of the second embedded domain name as 'datstart + dname validdatstart, ...' and passes it straight to 'query dname...

CVE-2026-44390

CVE-2026-44390 affects NLnet Labs Unbound up to and including 1.25.0. The issue arises when handling replies with very large RRsets that require name compression; malicious upstream responses with such RRsets can cause Unbound to spend excessive CPU time on compression, potentially leading to deg...

The vulnerability of the Unbound DNS server, which is related to external system control or configuration settings, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Unbound DNS server relates to the ability for processes outside the Unbound group to modify the configuration of the Unbound execution environment. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of th...

NLnet Labs Unbound Security Vulnerability

NLnet Labs Unbound is an open source DNS server from the Dutch NLnet Labs team. A security vulnerability exists in NLnet Labs Unbound that originates from allowing a remote attacker to cause a denial of service resource consumption by scheduling DNS query accumulation...

The vulnerability of the Unbound DNS server lies in its ability to generate a burst of requests to the server using responses from DNS resolvers. This allows a hacker to execute a DDoS attack by utilizing DNS traffic.

The vulnerability of the Unbound DNS server relates to the possibility of generating an impulsive flow of numerous requests to the server, using responses from DNS resolvers. Exploiting this vulnerability allows a malicious actor to carry out a DDoS attack by utilizing DNS traffic...

The vulnerability of the Unbound DNS server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the Unbound DNS server, related to incorrect session expiration times, allows attackers to gain access to confidential data.

The vulnerability of the Unbound DNS server is related to incorrect session expiration times. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the Unbound DNS-server module allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Unbound DNS-server module involves a lack of measures for securing input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

DEBIAN-CVE-2022-30699

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue...

The vulnerability of the dname_pkt_copy function in the DNS server Unbound, allowing a hacker to cause a service failure

The vulnerability of the dnamepktcopy function in the Unbound DNS server is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the dname_pkt_copy function in the DNS server Unbound, allowing a hacker to cause a service failure

The vulnerability of the dnamepktcopy function in the Unbound DNS server is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the sldns_str2wire_dname_buf_origin function in the DNS server Unbound allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sldnsstr2wirednamebuforigin function in the DNS server’s Unbound component is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

ALPINE-CVE-2020-28935

NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for...

The vulnerability of the Unbound DNS server, related to the execution of operations beyond the buffer in memory, allows attackers to cause a service failure.

The vulnerability of the Unbound DNS server is related to an error in processing certain NOTIFY requests. Exploiting this vulnerability could allow a malicious actor to cause a service failure...