Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
NLnet Labs patched a critical heap overflow (CVE-2026-81642) in Unbound's DNSSEC validator that a malicious DNS zone can trigger for possible RCE.
68
Organization
Nankai University
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 17, 2026
- Last mentionedSep 17, 2026
Timeline
1 articles · newest firstRelated CVEs
by mentions- CVE-2026-332781%9.1NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote…
- CVE-2026-81642<1%9.1Heap buffer overflow in NLnet Labs Unbound DNSKEY digesting enables DoS and RCE
- Heap Buffer Overflow in NLnet Labs Unbound DNS Resolver May Lead to RCE
- Heap Buffer Overflow in NLnet Labs Unbound DNS Resolver via Crafted DNS Responses
- Unbounded-read DoS in NLnetLabs Unbound TCP/DoT lets one client stall a worker
- Algorithmic Complexity DoS (ReTrap) in NLnet Labs Unbound DNSSEC Validation
- Use-after-free in NLnet Labs Unbound DNS-over-QUIC (DoQ) enables remote crash
- Use-After-Free in NLnet Labs Unbound DNS-over-HTTPS Can Crash Resolver
- Tampered Zone Data Served Before ZONEMD Verification in NLnet Labs Unbound
- NLnetLabs Unbound serve-expired flaw bypasses DNSBomb wait-limit defense (DoS)
Appears with
- NVDorganization · 1
- NLnet Labsorganization · 1
- Debianvendor · 1
- Unboundproduct · 1
- CISAorganization · 1
- Anthropicorganization · 1
- NLnet Labsvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.