Skip to content
OpenAdvisories

Package · Debian

unbound

86 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-97206 Public exploit

    DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.

    NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh…

    NLnet Labs Unbound unbound unbound Debian Ubuntu
  • High 7.5
    CVE-2023-50868 Public exploit EPSS 74%

    The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote att…

    bind9 bind9 bind unbound Debian Ubuntu Alpine
  • High 7.5
    CVE-2023-50387 Public exploit EPSS 100%

    Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to …

    bind9 bind9 bind unbound Debian Ubuntu Alpine