| CVE-2026-50248 |
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that…
|
6.5
Moyenne
|
22 juil. 2026 |
| CVE-2026-50243 |
In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front…
|
6.3
Moyenne
|
22 juil. 2026 |
| CVE-2026-50046 |
In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS (DoT) forwarded…
|
5.9
Moyenne
|
22 juil. 2026 |
| CVE-2026-50045 |
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a…
|
5.3
Moyenne
|
22 juil. 2026 |
| CVE-2026-46582 |
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could…
|
3.7
Faible
|
22 juil. 2026 |
| CVE-2026-44690 |
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined…
|
7.5
Élevée
|
22 juil. 2026 |
| CVE-2026-44687 |
In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate…
|
3.7
Faible
|
22 juil. 2026 |
| CVE-2026-44621 |
With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with…
|
5.9
Moyenne
|
22 juil. 2026 |
| CVE-2026-42955 |
In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost…
|
3.7
Faible
|
22 juil. 2026 |
| CVE-2026-41637 |
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted…
|
3.7
Faible
|
22 juil. 2026 |
| CVE-2026-40691 |
In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the…
|
7.5
Élevée
|
22 juil. 2026 |
| CVE-2026-32665 |
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two…
|
7.5
Élevée
|
22 juil. 2026 |
| CVE-2026-14586 |
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and…
|
5.9
Moyenne
|
22 juil. 2026 |
| CVE-2026-44608 |
NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain…
|
4.6
Moyenne
|
20 mai 2026 |
| CVE-2026-44390 |
NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets…
|
6.9
Moyenne
|
20 mai 2026 |
| CVE-2026-42960 |
NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the…
|
5.7
Moyenne
|
20 mai 2026 |
| CVE-2026-42959 |
NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that…
|
8.7
Élevée
|
20 mai 2026 |
| CVE-2026-42944 |
NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when…
|
8.7
Élevée
|
20 mai 2026 |
| CVE-2026-42923 |
NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to…
|
6.9
Moyenne
|
20 mai 2026 |
| CVE-2026-42534 |
NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its…
|
6.9
Moyenne
|
20 mai 2026 |
| CVE-2026-41292 |
NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to…
|
6.6
Moyenne
|
20 mai 2026 |
| CVE-2026-40622 |
NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of…
|
6.6
Moyenne
|
20 mai 2026 |
| CVE-2026-33278 |
NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables…
|
9.1
Critique
|
20 mai 2026 |
| CVE-2026-32792 |
NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with…
|
4.6
Moyenne
|
20 mai 2026 |
| CVE-2025-11411 |
NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks
|
5.7
Moyenne
|
22 oct. 2025 |