Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

unbound — Vulnerabilities & Security Advisories 59

All 59 CVE vulnerabilities found in unbound, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the Unbound DNS resolver, specifically focusing on implementation flaws and protocol weaknesses identified by the NLnet Labs vendor. The collection encompasses a comprehensive history of reported issues ranging from early release versions to the most recent updates, covering a time span that includes critical buffer overflows, denial-of-service triggers, and cryptographic validation failures. Readers can utilize this resource to track the vendor's official security advisories, analyze the evolution of specific weakness classes within the DNS ecosystem, or review the complete vulnerability history of the Unbound product for risk assessment purposes. The data presented here serves as a centralized reference for security professionals and system administrators seeking to understand the attack surface of this widely deployed open-source software. By consolidating disparate reports into a single view, the page facilitates efficient monitoring of emerging threats and aids in the prioritization of necessary patches. Users will find detailed descriptions of the technical mechanisms behind each vulnerability, allowing for informed decisions regarding system hardening and configuration adjustments. This repository ensures that all known security defects are documented chronologically, providing a clear timeline of the product's security posture over its entire lifecycle without relying on external or fragmented sources.

Vendor: NLnet Labs

CVE ID Title CVSS Severity Published
CVE-2026-97206 DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments. CWE-416 7.5 High 2026-10-21
CVE-2026-96405 Aggregate DNS name chained pointer decompression work leads to degradation of service. CWE-770 5.3 Medium 2026-10-21
CVE-2026-50106 Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. CWE-807 6.5 Medium 2026-10-21
CVE-2026-35501 Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record. CWE-354 3.7 Low 2026-10-21
CVE-2026-109125 Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold' CWE-205 5.3 Medium 2026-10-21
CVE-2026-85501 Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC CWE-770 5.3 Medium 2026-09-16
CVE-2026-82720 Use-after-free in DoH stream cleanup code path CWE-416 5.9 Medium 2026-09-16
CVE-2026-82717 CNAME synthesis could lead to heap corruption CWE-122 8.4 High 2026-09-16
CVE-2026-81642 Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY CWE-122 9.1 Critical 2026-09-16
CVE-2026-81634 Possible heap buffer overflow during DNSSEC canonicalization CWE-122 7.5 High 2026-09-16
CVE-2026-80225 Possible degradation of service from continuous queries on the same TCP/DoT connection CWE-770 5.3 Medium 2026-09-16
CVE-2026-78227 Use-after-free in DoQ stream output buffer on reset re-transmission CWE-416 6.5 Medium 2026-09-16
CVE-2026-77955 Possible ZONEMD verification bypass window CWE-345 4.4 Medium 2026-09-16
CVE-2026-77860 'serve-expired' can bypass Unbound 'wait-limit' CWE-675 3.7 Low 2026-09-16
CVE-2026-56444 Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration CWE-772 5.9 Medium 2026-07-22
CVE-2026-56416 Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name CWE-354 4.8 Medium 2026-07-22
CVE-2026-55991 Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 CWE-195 5.9 Medium 2026-07-22
CVE-2026-55990 Packet of death for a DNSCrypt misconfigured Unbound CWE-457 5.9 Medium 2026-07-22
CVE-2026-55973 'dns-error-reporting: yes' leads to stack buffer overflow CWE-20 7.5 High 2026-07-22
CVE-2026-55717 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash CWE-476 5.9 Medium 2026-07-22
CVE-2026-55708 Privacy/configuration issue when adding local data in views through 'unbound-control' CWE-1188 3.1 Low 2026-07-22
CVE-2026-54478 DNS Cookie bypass when combined with proxy-protocol use CWE-290 3.7 Low 2026-07-22
CVE-2026-52863 Memory corruption could lead to crash and denial of service CWE-416 5.9 Medium 2026-07-22
CVE-2026-50252 Possible cache poisoning attack by mapping source port population per thread CWE-349 - - 2026-07-22
CVE-2026-50251 Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush CWE-184 5.3 Medium 2026-07-22
CVE-2026-50248 BOGUS configured primary hostname accepted for XFR in auth/rpz zones CWE-345 6.5 Medium 2026-07-22
CVE-2026-50243 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL CWE-348 - - 2026-07-22
CVE-2026-50046 Possible heap use-after-free in an error path when a DoT forwarded query is jostled out CWE-416 5.9 Medium 2026-07-22
CVE-2026-50045 'max-global-quota' reset by DNSSEC validation restarts CWE-406 5.3 Medium 2026-07-22
CVE-2026-46582 A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path CWE-358 3.7 Low 2026-07-22

All 59 known CVE vulnerabilities affecting unbound with full Chinese analysis, references, and POCs where available.