UN
Product
Unbound
73
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 12High 23Medium 25Low 8
Watch
Add Unbound to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78227 | 6.5 | Sep 16 | Use-after-free in DoQ stream output buffer on reset re-transmission Affected: 1.22.0 before 1.26.1 |
| CVE-2026-50248 | 6.5 | Jul 22 | BOGUS configured primary hostname accepted for XFR in auth/rpz zones Affected: 1.7.0 before 1.25.2 |
| CVE-2022-30699 | 6.5 | Aug 1 | Novel "ghost domain names" attack by updating almost expired delegation information Affected: before 1.16.2 |
| CVE-2022-30698 | 6.5 | Aug 1 | Novel "ghost domain names" attack by introducing subdomain delegations Affected: before 1.16.2 |
| CVE-2026-82720 | 5.9 | Sep 16 | Use-after-free in DoH stream cleanup code path Affected: 1.12.0 before 1.26.1 |
| CVE-2026-56444 | 5.9 | Jul 22 | Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration Affected: 1.20.0 before 1.25.2 |
| CVE-2026-55991 | 5.9 | Jul 22 | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 Affected: 1.22.0 before 1.25.2 |
| CVE-2026-55990 | 5.9 | Jul 22 | Packet of death for a DNSCrypt misconfigured Unbound Affected: 1.7.0 before 1.25.2 |
| CVE-2026-55717 | 5.9 | Jul 22 | 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash Affected: 1.10.0 before 1.25.2 |
| CVE-2026-52863 | 5.9 | Jul 22 | Memory corruption could lead to crash and denial of service Affected: 1.25.0 before 1.25.2 |
| CVE-2026-50046 | 5.9 | Jul 22 | Possible heap use-after-free in an error path when a DoT forwarded query is jostled out Affected: 1.15.0 before 1.25.2 |
| CVE-2026-44621 | 5.9 | Jul 22 | Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated Affected: before 1.25.2 |
| CVE-2026-44608 | 5.9 | May 20 | Use after free and crash under special conditions in RPZ code Affected: 1.14.0 before 1.25.1 |
| CVE-2019-25031 | 5.9 | Apr 27 | Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session Affected: before 1.9.5 |
| CVE-2020-28935 | 5.5 | Dec 7 | NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink… Affected: before 1.13.0 |
| CVE-2026-50251 | 5.3 | Jul 22 | Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush Affected: before 1.25.2 |
| CVE-2026-50045 | 5.3 | Jul 22 | 'max-global-quota' reset by DNSSEC validation restarts Affected: 1.22.0 before 1.25.2 |
| CVE-2026-44390 | 5.3 | May 20 | Unbounded name compression in certain cases causes degradation of service Affected: before 1.25.1 |
| CVE-2026-42923 | 5.3 | May 20 | Degradation of service with unbounded NSEC3 hash calculations Affected: 1.19.1 before 1.25.1 |
| CVE-2026-42534 | 5.3 | May 20 | Jostle logic bypass degrades resolution performance Affected: before 1.25.1 |
| CVE-2026-32792 | 5.3 | May 20 | Packet of death with DNSCrypt Affected: 1.6.2 before 1.25.1 |
| CVE-2024-8508 | 5.3 | Oct 3 | NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for Affected: before 1.21.1 |
| CVE-2017-15105 | 5.3 | Jan 23 | A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records Affected: before 1.6.8 |
| CVE-2026-56416 | 4.8 | Jul 22 | Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name Affected: before 1.25.2 |
| CVE-2026-77955 | 4.4 | Sep 16 | Possible ZONEMD verification bypass window Affected: 1.13.2 before 1.26.1 |
Showing 25