Summary
[1.24.2-23]
- Prevent heap corruption during CNAME synthesis (CVE-2026-82717)
[1.24.2-22]
- Prevent heap buffer overflow during DNSSEC canonicalization
(CVE-2026-81634)
[1.24.2-21]
- Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642)
- Add unit test for the vulnerability too
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | python3-unbound | 0:1.24.2-7.el10_2.6 |
| Oracle Linux · 10 | unbound | 0:1.24.2-7.el10_2.6 |
| Oracle Linux · 10 | unbound-anchor | 0:1.24.2-7.el10_2.6 |
| Oracle Linux · 10 | unbound-devel | 0:1.24.2-7.el10_2.6 |
| Oracle Linux · 10 | unbound-dracut | 0:1.24.2-7.el10_2.6 |
| Oracle Linux · 10 | unbound-libs | 0:1.24.2-7.el10_2.6 |
| Oracle Linux · 10 | unbound-utils | 0:1.24.2-7.el10_2.6 |
Vulnerabilities 3
-
Critical 9.1CVE-2026-81642 Public exploit
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA…
-
High 8.4
CNAME synthesis could lead to heap corruption
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis duri…
-
High 7.5
Possible heap buffer overflow during DNSSEC canonicalization
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length chec…