CVE-2026-77955

NLnet Labs Unbound versions 1.13.2 through 1.26.1 are affected by a timing window in ZONEMD verification for zones configured with zonemd-check: yes located below (but not at) a trust anchor. The root cause is the asynchronous DS/DNSKEY resolution required before the ZONEMD integrity check comple...

CVE-2026-77955

In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...

NSEC3-Encloser-Attack

NSEC3-Encloser-Attack Zonefile Generation This project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. Requirements Python3 tested on Python3.10 Installed Python dependencies: cryptography 42.0.5 dnspython 2.6.1 Components lib: Python...

EUVD-2024-21616

Malicious code in bioql PyPI...

EUVD-2024-21619

Malicious code in bioql PyPI...

CVE-2024-24195

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...

CVE-2024-24192

robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...

CVE-2024-24192

robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...

CVE-2024-24195

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...

CVE-2024-24195

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...

CVE-2024-24195

CVE-2024-24195 affects robdns via a misaligned address introduced in commit d76d2e6 at /src/zonefile-insertion.c. The issue is tracked with a CVSSv3.1 base score of 7.5 (HIGH), with NETWORK attack vector, LOW attack complexity, no privileges required, and a HIGH impact on availability (I=N, A=H; ...

CVE-2024-24195

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...

CVE-2024-24192

CVE-2024-24192 affects robdns, with a heap overflow in the code path handling block->filename in /src/zonefile-insertion.c (version d76d2e6). Multiple connected sources corroborate the issue and identify the vulnerable component as block->filename and the function zonefile-insertion.c. PT-2...

CVE-2024-24192

robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...

robdns security breach

robdns is a dns service. A security vulnerability exists in robdns, which originates from the inclusion of unaligned addresses in /src/zonefile-insertion.c...

PT-2024-20312 · Robdns · Robdns

Name of the Vulnerable Software and Affected Versions: robdns version d76d2e6 Description: A heap overflow was discovered in robdns via the component block-filename at /src/zonefile-insertion.c. Recommendations: For version d76d2e6, consider restricting access to the vulnerable component...

PT-2024-20314 · Robdns · Robdns

Name of the Vulnerable Software and Affected Versions: robdns version d76d2e6 Description: A misaligned address was discovered in the robdns commit d76d2e6 at the /src/zonefile-insertion.c location. Recommendations: For version d76d2e6, consider updating to a newer version that contains a fix for...

robdns security breach

robdns is a dns service. A security vulnerability exists in robdns, which originates from a heap overflow via the component block-filename at /src/zonefile-insertion.c. The vulnerability is caused by the component block-filename...