agentprime: nlnet-labs-unbound

agentprime: nlnet-labs-unboundEvery new CVE for nlnet-labs-unbound.https://agentprime.io/CVE-2026-97206: DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.https://agentprime.io/advisories/CVE-2026-97206/https://agentprime.io/advisories/CVE-2026-97206/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 08:57:41 GMTCVECVE-2026-96405: Aggregate DNS name chained pointer decompression work leads to degradation of service.https://agentprime.io/advisories/CVE-2026-96405/https://agentprime.io/advisories/CVE-2026-96405/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 08:57:26 GMTCVECVE-2026-50106: Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.https://agentprime.io/advisories/CVE-2026-50106/https://agentprime.io/advisories/CVE-2026-50106/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 08:57:11 GMTCVECVE-2026-35501: Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.https://agentprime.io/advisories/CVE-2026-35501/https://agentprime.io/advisories/CVE-2026-35501/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 08:56:55 GMTCVECVE-2026-109125: Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'https://agentprime.io/advisories/CVE-2026-109125/https://agentprime.io/advisories/CVE-2026-109125/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 08:56:35 GMTCVECVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEChttps://agentprime.io/advisories/CVE-2026-85501/https://agentprime.io/advisories/CVE-2026-85501/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:32:25 GMTCVECVE-2026-82720: Use-after-free in DoH stream cleanup code pathhttps://agentprime.io/advisories/CVE-2026-82720/https://agentprime.io/advisories/CVE-2026-82720/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:32:10 GMTCVECVE-2026-82717: CNAME synthesis could lead to heap corruptionhttps://agentprime.io/advisories/CVE-2026-82717/https://agentprime.io/advisories/CVE-2026-82717/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:31:59 GMTCVECVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEYhttps://agentprime.io/advisories/CVE-2026-81642/https://agentprime.io/advisories/CVE-2026-81642/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:30:58 GMTCVEcriticalCVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalizationhttps://agentprime.io/advisories/CVE-2026-81634/https://agentprime.io/advisories/CVE-2026-81634/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:30:15 GMTCVECVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connectionhttps://agentprime.io/advisories/CVE-2026-80225/https://agentprime.io/advisories/CVE-2026-80225/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:30:04 GMTCVECVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmissionhttps://agentprime.io/advisories/CVE-2026-78227/https://agentprime.io/advisories/CVE-2026-78227/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:29:52 GMTCVECVE-2026-77955: Possible ZONEMD verification bypass windowhttps://agentprime.io/advisories/CVE-2026-77955/https://agentprime.io/advisories/CVE-2026-77955/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:29:39 GMTCVECVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit'https://agentprime.io/advisories/CVE-2026-77860/https://agentprime.io/advisories/CVE-2026-77860/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 08:29:23 GMTCVECVE-2026-56444: Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configurationhttps://agentprime.io/advisories/CVE-2026-56444/https://agentprime.io/advisories/CVE-2026-56444/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:10:34 GMTCVECVE-2026-56416: Possible heap buffer overflow when validator canonicalizes RDATA that contains domain namehttps://agentprime.io/advisories/CVE-2026-56416/https://agentprime.io/advisories/CVE-2026-56416/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:10:24 GMTCVECVE-2026-55991: Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2https://agentprime.io/advisories/CVE-2026-55991/https://agentprime.io/advisories/CVE-2026-55991/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:10:13 GMTCVECVE-2026-55990: Packet of death for a DNSCrypt misconfigured Unboundhttps://agentprime.io/advisories/CVE-2026-55990/https://agentprime.io/advisories/CVE-2026-55990/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:10:01 GMTCVECVE-2026-55973: 'dns-error-reporting: yes' leads to stack buffer overflowhttps://agentprime.io/advisories/CVE-2026-55973/https://agentprime.io/advisories/CVE-2026-55973/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:09:50 GMTCVECVE-2026-55717: 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crashhttps://agentprime.io/advisories/CVE-2026-55717/https://agentprime.io/advisories/CVE-2026-55717/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:09:40 GMTCVECVE-2026-55708: Privacy/configuration issue when adding local data in views through 'unbound-control'https://agentprime.io/advisories/CVE-2026-55708/https://agentprime.io/advisories/CVE-2026-55708/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:09:30 GMTCVECVE-2026-54478: DNS Cookie bypass when combined with proxy-protocol usehttps://agentprime.io/advisories/CVE-2026-54478/https://agentprime.io/advisories/CVE-2026-54478/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:09:18 GMTCVECVE-2026-52863: Memory corruption could lead to crash and denial of servicehttps://agentprime.io/advisories/CVE-2026-52863/https://agentprime.io/advisories/CVE-2026-52863/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:09:06 GMTCVECVE-2026-50252: Possible cache poisoning attack by mapping source port population per threadhttps://agentprime.io/advisories/CVE-2026-50252/https://agentprime.io/advisories/CVE-2026-50252/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:08:54 GMTCVECVE-2026-50251: Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flushhttps://agentprime.io/advisories/CVE-2026-50251/https://agentprime.io/advisories/CVE-2026-50251/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:08:43 GMTCVECVE-2026-50248: BOGUS configured primary hostname accepted for XFR in auth/rpz zoneshttps://agentprime.io/advisories/CVE-2026-50248/https://agentprime.io/advisories/CVE-2026-50248/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:08:32 GMTCVECVE-2026-50243: 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAILhttps://agentprime.io/advisories/CVE-2026-50243/https://agentprime.io/advisories/CVE-2026-50243/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:08:21 GMTCVECVE-2026-50046: Possible heap use-after-free in an error path when a DoT forwarded query is jostled outhttps://agentprime.io/advisories/CVE-2026-50046/https://agentprime.io/advisories/CVE-2026-50046/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:08:08 GMTCVECVE-2026-50045: 'max-global-quota' reset by DNSSEC validation restartshttps://agentprime.io/advisories/CVE-2026-50045/https://agentprime.io/advisories/CVE-2026-50045/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:07:55 GMTCVECVE-2026-46582: A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply pathhttps://agentprime.io/advisories/CVE-2026-46582/https://agentprime.io/advisories/CVE-2026-46582/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:07:40 GMTCVECVE-2026-44690: Cross-zone wildcard cache poisoning via RRSIG.labels manipulationhttps://agentprime.io/advisories/CVE-2026-44690/https://agentprime.io/advisories/CVE-2026-44690/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:06:56 GMTCVECVE-2026-44687: Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAINhttps://agentprime.io/advisories/CVE-2026-44687/https://agentprime.io/advisories/CVE-2026-44687/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:06:42 GMTCVECVE-2026-44621: Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminatedhttps://agentprime.io/advisories/CVE-2026-44621/https://agentprime.io/advisories/CVE-2026-44621/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:06:28 GMTCVECVE-2026-42955: Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue recordshttps://agentprime.io/advisories/CVE-2026-42955/https://agentprime.io/advisories/CVE-2026-42955/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:05:53 GMTCVECVE-2026-41637: Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC querieshttps://agentprime.io/advisories/CVE-2026-41637/https://agentprime.io/advisories/CVE-2026-41637/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:04:52 GMTCVECVE-2026-40691: Packet of death for DNSCrypt over TCPhttps://agentprime.io/advisories/CVE-2026-40691/https://agentprime.io/advisories/CVE-2026-40691/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:04:35 GMTCVECVE-2026-32665: Remote DNS-over-QUIC denial of service due to `quic-size` budget bypasshttps://agentprime.io/advisories/CVE-2026-32665/https://agentprime.io/advisories/CVE-2026-32665/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:04:18 GMTCVECVE-2026-14586: Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environmentshttps://agentprime.io/advisories/CVE-2026-14586/https://agentprime.io/advisories/CVE-2026-14586/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 13:03:53 GMTCVECVE-2026-44608: Use after free and crash under special conditions in RPZ codehttps://agentprime.io/advisories/CVE-2026-44608/https://agentprime.io/advisories/CVE-2026-44608/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:21:57 GMTCVECVE-2026-44390: Unbounded name compression in certain cases causes degradation of servicehttps://agentprime.io/advisories/CVE-2026-44390/https://agentprime.io/advisories/CVE-2026-44390/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:21:24 GMTCVECVE-2026-42960: Possible cache poisoning via promiscuous records for the authority sectionhttps://agentprime.io/advisories/CVE-2026-42960/https://agentprime.io/advisories/CVE-2026-42960/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:21:02 GMTCVECVE-2026-42959: Crash during DNSSEC validation of malicious contenthttps://agentprime.io/advisories/CVE-2026-42959/https://agentprime.io/advisories/CVE-2026-42959/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:20:45 GMTCVECVE-2026-42944: Heap overflow with multiple NSID, COOKIE, PADDING EDNS optionshttps://agentprime.io/advisories/CVE-2026-42944/https://agentprime.io/advisories/CVE-2026-42944/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:20:23 GMTCVECVE-2026-42923: Degradation of service with unbounded NSEC3 hash calculationshttps://agentprime.io/advisories/CVE-2026-42923/https://agentprime.io/advisories/CVE-2026-42923/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:20:01 GMTCVECVE-2026-42534: Jostle logic bypass degrades resolution performancehttps://agentprime.io/advisories/CVE-2026-42534/https://agentprime.io/advisories/CVE-2026-42534/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:19:37 GMTCVECVE-2026-41292: Long list of incoming EDNS options degrades performancehttps://agentprime.io/advisories/CVE-2026-41292/https://agentprime.io/advisories/CVE-2026-41292/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:19:13 GMTCVECVE-2026-40622: Another 'ghost domain names' attack varianthttps://agentprime.io/advisories/CVE-2026-40622/https://agentprime.io/advisories/CVE-2026-40622/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:18:41 GMTCVECVE-2026-33278: Possible arbitrary code execution during DNSSEC validationhttps://agentprime.io/advisories/CVE-2026-33278/https://agentprime.io/advisories/CVE-2026-33278/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:18:15 GMTCVEcriticalCVE-2026-32792: Packet of death with DNSCrypthttps://agentprime.io/advisories/CVE-2026-32792/https://agentprime.io/advisories/CVE-2026-32792/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 09:17:47 GMTCVECVE-2025-11411: Possible domain hijacking via promiscuous records in the authority sectionhttps://agentprime.io/advisories/CVE-2025-11411/https://agentprime.io/advisories/CVE-2025-11411/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Oct 2025 12:28:02 GMTCVE