Skip to content
OpenAdvisories
Medium WID-SEC-2026-4073 5 CVEs

Unbound: Mehrere Schwachstellen

Published Oct 20, 2026 · Updated Nov 9, 2026 · Revision 5 · de

Vendor: cPanel Vendor: Debian Vendor: Fedora Vendor: SUSE Product: cPanel/WHM Product: Linux Product: Linux Product: openSUSE Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.

Product

Unbound ist ein validierender, rekursiver DNS-Resolver.

Vulnerabilities 5

  • High 7.5
    CVE-2026-97206 Public exploit

    DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.

    NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2026-50106

    Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.

    When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor who can deliver o…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2026-109125

    Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'

    In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram reaches the upstream source port …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2026-96405

    Aggregate DNS name chained pointer decompression work leads to degradation of service.

    NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux
  • Low 3.7
    CVE-2026-35501

    Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.

    When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor with a forg…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux

Revision history

  1. #5

    Neue Updates von openSUSE aufgenommen

  2. #4

    Neue Updates von Fedora aufgenommen

  3. #3

    Neue Updates von Debian aufgenommen

  4. #2

    Referenz(en) aufgenommen: EUVD-2026-107154, EUVD-2026-107153, EUVD-2026-107152, EUVD-2026-107151, EUVD-2026-107150

  5. #1

    Initiale Fassung

References