Possible cache poisoning via promiscuous records for the authority section

CNAME synthesis could lead to heap corruption

Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

Possible arbitrary code execution during DNSSEC validation

Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy

Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c

Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c

Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par

Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro

Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc

Possible cache poisoning attack by mapping source port population per thread

Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC

Possible heap buffer overflow during DNSSEC canonicalization

Possible degradation of service from continuous queries on the same TCP/DoT connection

'dns-error-reporting: yes' leads to stack buffer overflow

Cross-zone wildcard cache poisoning via RRSIG.labels manipulation

Packet of death for DNSCrypt over TCP

Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass

Crash during DNSSEC validation of malicious content

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

Long list of incoming EDNS options degrades performance

Another 'ghost domain names' attack variant

NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path that can lead to an infinite…

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more…

A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software

Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy

Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy

Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet

Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname

An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers

Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer

Use-after-free in DoQ stream output buffer on reset re-transmission

BOGUS configured primary hostname accepted for XFR in auth/rpz zones

Novel "ghost domain names" attack by updating almost expired delegation information

Novel "ghost domain names" attack by introducing subdomain delegations

Use-after-free in DoH stream cleanup code path

Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration

Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

Packet of death for a DNSCrypt misconfigured Unbound

'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash

Memory corruption could lead to crash and denial of service

Possible heap use-after-free in an error path when a DoT forwarded query is jostled out

Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated

Use after free and crash under special conditions in RPZ code

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session

NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink…