Skip to content
OpenAdvisories
High WID-SEC-2026-1599 11 CVEs

Unbound: Mehrere Schwachstellen

Published May 19, 2026 · Updated Nov 10, 2026 · Revision 40 · de

Vendor: amazon Vendor: cPanel Vendor: Debian Vendor: F5 Vendor: Fedora Vendor: FreeBSD Vendor: IBM Vendor: OpenBSD Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: BIG-IP Product: cPanel/WHM Product: Enterprise Linux Product: FreeBSD OS Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: OpenBSD Product: openshift Product: openSUSE Product: QRadar SIEM Product: Rocky Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um einen Denial of Service Zustand herbeizuführen, um möglicherweise Code auszuführen und um nicht näher spezifizierte Auswirkungen zu verursachen.

Product

Unbound ist ein validierender, rekursiver DNS-Resolver.

Vulnerabilities 11

  • Critical 9.1
    CVE-2026-33278

    Possible arbitrary code execution during DNSSEC validation

    NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a destination p…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • High 8.7
    CVE-2026-42944

    Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

    NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid', 'answer-cookie', '…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • High 8.7
    CVE-2026-42959

    Crash during DNSSEC validation of malicious content

    NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code uses the wrong…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 6.9
    CVE-2026-42534

    Jostle logic bypass degrades resolution performance

    NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance. Retransmits of the same query could renew the age of slow running queries and not allow the jostle …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 6.9
    CVE-2026-42923

    Degradation of service with unbounded NSEC3 hash calculations

    NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does not take into account the limit on NSEC3 hash calculations introduced in 1.19.1. This leads…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 6.9
    CVE-2026-44390

    Unbounded name compression in certain cases causes degradation of service

    NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suff…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 6.6
    CVE-2026-40622

    Another 'ghost domain names' attack variant

    NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain window by up to one cached TTL configured value. Similar to other 'ghost domain names' attacks, a…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 6.6
    CVE-2026-41292

    Long list of incoming EDNS options degrades performance

    NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 5.7
    CVE-2026-42960

    Possible cache poisoning via promiscuous records for the authority section

    NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section. Promiscuous RRSets that complement DNS replies in the authority section can be used to trick Unbound to cache such records. If …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 4.6
    CVE-2026-32792

    Packet of death with DNSCrypt

    NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt'). A bad DNSCrypt query could underflow Unbound's DNSCrypt packet reading procedure that may lead to heap…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux
  • Medium 4.6
    CVE-2026-44608

    Use after free and crash under special conditions in RPZ code

    NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR reload, RPZ zone with 'rpz-nsip'/'rpz-nsdname' triggers) it could result in heap use-after-fre…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

Revision history

  1. #40

    Neue Updates von Red Hat aufgenommen

  2. #39

    Neue Updates aufgenommen

  3. #38

    Neue Updates von Debian aufgenommen

  4. #37

    Neue Updates von Oracle Linux aufgenommen

  5. #36

    Neue Updates von SUSE aufgenommen

  6. #35

    Neue Updates von F5 aufgenommen

  7. #34

    Neue Updates von SUSE aufgenommen

  8. #33

    Neue Updates von F5 aufgenommen

  9. #32

    Neue Updates von Red Hat aufgenommen

  10. #31

    Neue Updates aufgenommen

  11. #30

    Neue Updates von F5 aufgenommen

  12. #29

    Neue Updates von SUSE aufgenommen

  13. #28

    Neue Updates von F5 aufgenommen

  14. #27

    Neue Updates von IBM aufgenommen

  15. #26

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  16. #25

    Neue Updates von F5 aufgenommen

  17. #24

    Neue Updates von Fedora aufgenommen

  18. #23

    Neue Updates von Oracle Linux aufgenommen

  19. #22

    Neue Updates von Oracle Linux aufgenommen

  20. #21

    Neue Updates von Amazon aufgenommen

  21. #20

    Neue Updates von F5 aufgenommen

  22. #19

    Neue Updates von Oracle Linux und Red Hat aufgenommen

  23. #18

    Neue Updates von Red Hat aufgenommen

  24. #17

    Neue Updates von Red Hat aufgenommen

  25. #16

    Neue Updates von openSUSE aufgenommen

References