Search CVE reports

(NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contain ...)

(NLnet Labs Unbound up to and including version 1.26.1 limits compressi ...)

(When NLnet Labs Unbound up to and including version 1.26.1 is configur ...)

(When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is co ...)

(In NLnet Labs Unbound up to and including version 1.26.1, an observabl ...)

Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service when malicious zones are used to serve the algorithmic complexity...

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths (i.e., RPZ drop query, jostle due to heavy...

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The...

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an...

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner...