Skip to content
Nlnetlabs vulnerabilities
Newest
-
nlnet labs unbound
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
CVE-2026-85501
Fix available
5.3 Medium
-
nlnet labs unbound
Use-after-free in DoH stream cleanup code path
CVE-2026-82720
Fix available
5.9 Medium
-
nlnet labs unbound
CNAME synthesis could lead to heap corruption
CVE-2026-82717
Fix available
8.4 High
-
nlnet labs unbound
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
CVE-2026-81642
Public exploitFix available
9.1 Critical
-
nlnet labs unbound
Possible heap buffer overflow during DNSSEC canonicalization
CVE-2026-81634
Fix available
7.5 High
-
nlnet labs unbound
Possible degradation of service from continuous queries on the same TCP/DoT connection
CVE-2026-80225
Fix available
5.3 Medium
-
nlnet labs unbound
Use-after-free in DoQ stream output buffer on reset re-transmission
CVE-2026-78227
Fix available
6.5 Medium
-
nlnet labs unbound
Possible ZONEMD verification bypass window
CVE-2026-77955
Fix available
4.4 Medium
-
nlnet labs unbound
'serve-expired' can bypass Unbound 'wait-limit'
CVE-2026-77860
Fix available
3.7 Low
-
nlnet labs nsd
Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
CVE-2026-19538
Fix available
8.2 High
-
nlnet labs nsd
Remote UDP DoS by sending multiple DNS Cookie options
CVE-2026-19401
Fix available
8.2 High
-
nlnet labs nsd
Remote TCP DoS by throttling the TCP receive window
CVE-2026-18916
Fix available
6.9 Medium
-
nlnet labs nsd
Wrong interpretation of ACL ranges
CVE-2026-18664
Fix available
8.2 High
-
nlnet labs unbound
Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration
CVE-2026-56444
Fix available
5.9 Medium
-
nlnet labs unbound
Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
CVE-2026-56416
Fix available
4.8 Medium
-
nlnet labs unbound
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
CVE-2026-55991
Fix available
5.9 Medium
-
nlnet labs unbound
Packet of death for a DNSCrypt misconfigured Unbound
CVE-2026-55990
Fix available
5.9 Medium
-
nlnet labs unbound
'dns-error-reporting: yes' leads to stack buffer overflow
CVE-2026-55973
Fix available
7.5 High
-
nlnet labs unbound
'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
CVE-2026-55717
Fix available
5.9 Medium
-
nlnet labs unbound
Privacy/configuration issue when adding local data in views through 'unbound-control'
CVE-2026-55708
Fix available
3.1 Low
-
nlnet labs unbound
DNS Cookie bypass when combined with proxy-protocol use
CVE-2026-54478
Fix available
3.7 Low
-
nlnet labs unbound
Memory corruption could lead to crash and denial of service
CVE-2026-52863
Fix available
5.9 Medium
-
nlnet labs unbound
Possible cache poisoning attack by mapping source port population per thread
CVE-2026-50252
Fix available
5.7 Medium
-
nlnet labs unbound
Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush
CVE-2026-50251
Fix available
5.3 Medium
-
nlnet labs unbound
BOGUS configured primary hostname accepted for XFR in auth/rpz zones
CVE-2026-50248
Fix available
6.5 Medium
-
nlnet labs unbound
'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL
CVE-2026-50243
Fix available
6.3 Medium
-
nlnet labs unbound
Possible heap use-after-free in an error path when a DoT forwarded query is jostled out
CVE-2026-50046
Fix available
5.9 Medium
-
nlnet labs unbound
'max-global-quota' reset by DNSSEC validation restarts
CVE-2026-50045
Fix available
5.3 Medium
-
nlnet labs unbound
A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
CVE-2026-46582
Fix available
3.7 Low
-
nlnet labs unbound
Cross-zone wildcard cache poisoning via RRSIG.labels manipulation
CVE-2026-44690
Fix available
7.5 High
-
nlnet labs unbound
Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN
CVE-2026-44687
Fix available
3.7 Low
-
nlnet labs unbound
Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated
CVE-2026-44621
Fix available
5.9 Medium
-
nlnet labs unbound
Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records
CVE-2026-42955
Fix available
3.7 Low
-
nlnet labs unbound
Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries
CVE-2026-41637
Fix available
3.7 Low
-
nlnet labs unbound
Packet of death for DNSCrypt over TCP
CVE-2026-40691
Fix available
7.5 High
-
nlnet labs unbound
Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
CVE-2026-32665
Fix available
7.5 High
-
nlnetlabs net::dns
Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains
CVE-2026-64194
Fix available
7.5 High
-
nlnetlabs net::dns
Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR
CVE-2026-64193
Fix available
9.8 Critical
-
nlnet labs nsd
Bypass of client certificate verification with transfer over TLS
CVE-2026-12490
Fix available
8.2 High
-
nlnet labs nsd
Out of bounds stack write with crafted APL RR
CVE-2026-12246
Fix available
7.2 High
-
nlnet labs nsd
Denial of DNS over TLS service by any DoT client
CVE-2026-12245
Fix available
8.7 High
-
nlnet labs nsd
Heap overflow and crash with crafted SVCB RR
CVE-2026-12244
Fix available
8.7 High
-
microsoft ldns
Insufficient verification that responses belong to a query
CVE-2026-10846
Fix available
8.2 High
-
nlnet labs routinator
Routinator crashes on specifically crafted RRDP XML files
CVE-2026-49235
Fix available
8.7 High
-
nlnet labs routinator
Routinator crashes on specifically crafted ASN strings in the API
CVE-2026-49234
Fix available
8.2 High
-
nlnet labs routinator
Routinator cache path traversal using rogue rsync URIs
CVE-2026-49233
Fix available
8.3 High
-
nlnet labs unbound
Use after free and crash under special conditions in RPZ code
CVE-2026-44608
Fix available
4.6 Medium
-
nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more
Unbounded name compression in certain cases causes degradation of service
CVE-2026-44390
Fix available
6.9 Medium
-
nlnet labs unbound
Possible cache poisoning via promiscuous records for the authority section
CVE-2026-42960
Fix available
5.7 Medium
-
nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more
Crash during DNSSEC validation of malicious content
CVE-2026-42959
Fix available
8.7 High
- Show olderLoading…