Unbound

Search everything

Mentions · 7d1
Mentions · 30d3
All mentions7
First seenSep 16, 2026
Last mentioned12h ago

Timeline

7 articles · newest first

Ubuntu 26.10 gets Unbound fixes from USN-8946-1

CVE-2026-80225 can let a remote attacker exhaust Unbound resources over TCP on listed LTS releases.

Ubuntu Security NoticesNov 10, 16:28 UTC · 12h agoAdvisoryCVE-2026-80225

Unbound 1.26.2 fixes high-severity DoQ use-after-free

CVE-2026-97206 can cause a use-after-free during DoQ path migration on multi-threaded Unbound deployments.

oss-securityOct 21, 15:27 UTC · 20d agoVulnerabilityCVE-2026-972061

Ubuntu fixes Unbound denial-of-service flaws in USN-8946-1

Crafted TCP connections or DNS responses can exhaust resources or crash Unbound; fixed package versions are not in the excerpt.

Ubuntu Security NoticesOct 21, 09:48 UTC · 20d agoAdvisoryCVE-2026-80225 CVE-2026-816341

USN-8873-1: Unbound vulnerabilities

Ubuntu patches two Unbound memory bugs that could allow denial of service or code execution.

Ubuntu Security NoticesOct 6, 04:41 UTC · Oct 6, 2026AdvisoryCVE-2026-81642 CVE-2026-827176 · 4 reads

NetBSD 10.2 security fixes close a remote kernel bug in ipfilter

NetBSD 10.2 fixes a remotely triggerable ipfilter kernel null-pointer bug and a TCP timestamp leak.

Help Net SecuritySep 23, 03:16 UTC · Sep 23, 2026VulnerabilityCVE-2026-4367 CVE-2025-114112

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

NLnet Labs patched a critical heap overflow (CVE-2026-81642) in Unbound's DNSSEC validator that a malicious DNS zone can trigger for possible RCE.

The Hacker NewsSep 17, 12:30 UTC · Sep 17, 2026VulnerabilityCVE-2026-81642 CVE-2026-82717 CVE-2026-81634+73 · 2 reads

Unbound: 1.26.1 addresses multiple CVE items

Unbound 1.26.1 fixes critical heap buffer overflow CVE-2026-81642 in DNSKEY digesting that may allow remote code execution.

oss-securitySep 16, 15:05 UTC · Sep 16, 2026VulnerabilityCVE-2026-816421 · 1 read

Related CVEs

by mentions

CVE-2026-81642<1%9.1
Heap buffer overflow in NLnet Labs Unbound DNSKEY digesting enables DoS and RCE
published Sep 16, 2026NLnet Labs UnboundPoC
CVE-2026-802257.5
Unbounded-read DoS in NLnetLabs Unbound TCP/DoT lets one client stall a worker
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-827178.4
Heap Buffer Overflow in NLnet Labs Unbound DNS Resolver May Lead to RCE
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-816347.5
Heap Buffer Overflow in NLnet Labs Unbound DNS Resolver via Crafted DNS Responses
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-855017.5
Algorithmic Complexity DoS (ReTrap) in NLnet Labs Unbound DNSSEC Validation
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-782276.5
Use-after-free in NLnet Labs Unbound DNS-over-QUIC (DoQ) enables remote crash
published Sep 16, 2026NLnet Labs Unbound (DNS-over-QUIC builds, compiled with --with-libngtcp2)
CVE-2026-827205.9
Use-After-Free in NLnet Labs Unbound DNS-over-HTTPS Can Crash Resolver
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-4367<1%5.5
libXpm: A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing…
published Jun 16, 2026
CVE-2026-779554.4
Tampered Zone Data Served Before ZONEMD Verification in NLnet Labs Unbound
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-778603.7
NLnetLabs Unbound serve-expired flaw bypasses DNSBomb wait-limit defense (DoS)
published Sep 16, 2026NLnet Labs Unbound

Appears with

NLnet Labsvendor · 3
Ubuntuvendor · 2
NLnet Labsorganization · 2
Canonicalvendor · 1
NetBSD Projectorganization · 1
libXpmproduct · 1
NetBSD Projectvendor · 1
Nankai Universityorganization · 1
NVDorganization · 1
Debianvendor · 1
ipfilterproduct · 1
Ubuntuorganization · 1
OpenSSLproduct · 1
CISAorganization · 1
NetBSDproduct · 1
Anthropicorganization · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned 12h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.