USN-8873-1: Unbound vulnerabilities
Ubuntu patches two Unbound memory bugs that could allow denial of service or code execution.
Ubuntu security notice USN-8873-1 addresses two Unbound flaws caused by incorrect memory handling. CVE-2026-81642, discovered by Yuqi Qiu and Xiang Li, could allow denial of service or arbitrary code execution. CVE-2026-82717, discovered by Ben Morris, has the same potential impact. The notice does not say either issue is being exploited.
- USN-8873-1 covers two Unbound memory-handling vulnerabilities.
- CVE-2026-81642 may allow denial of service or code execution.
- CVE-2026-82717 has the same described impact.
- The notice does not report active exploitation.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-81642+1 related CVE | Heap buffer overflow in NLnet Labs Unbound DNSKEY digesting enables DoS and RCE | 9.1 group max | <1% | PoC |
From the original article
Yuqi Qiu and Xiang Li discovered that Unbound did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-81642) Ben Morris discovered that Unbound did not correctly handle certain memory operations.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.