Package · Azure Linux

unbound

62 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.5

CVE-2026-97206 Public exploit

DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.

NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh…

NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux

Oct 21, 2026
High 7.5

CVE-2023-50868 Public exploit EPSS 74%

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote att…

bind9 bind9 bind unbound Debian Ubuntu Azure Linux Alpine Wolfi

Feb 14, 2024
High 7.5

CVE-2023-50387 Public exploit EPSS 100%

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to …

bind9 bind9 bind unbound Debian Ubuntu Azure Linux Alpine Wolfi

Feb 14, 2024