Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

unbound — Vulnerabilities & Security Advisories 59

All 59 CVE vulnerabilities found in unbound, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the Unbound DNS resolver, specifically focusing on implementation flaws and protocol weaknesses identified by the NLnet Labs vendor. The collection encompasses a comprehensive history of reported issues ranging from early release versions to the most recent updates, covering a time span that includes critical buffer overflows, denial-of-service triggers, and cryptographic validation failures. Readers can utilize this resource to track the vendor's official security advisories, analyze the evolution of specific weakness classes within the DNS ecosystem, or review the complete vulnerability history of the Unbound product for risk assessment purposes. The data presented here serves as a centralized reference for security professionals and system administrators seeking to understand the attack surface of this widely deployed open-source software. By consolidating disparate reports into a single view, the page facilitates efficient monitoring of emerging threats and aids in the prioritization of necessary patches. Users will find detailed descriptions of the technical mechanisms behind each vulnerability, allowing for informed decisions regarding system hardening and configuration adjustments. This repository ensures that all known security defects are documented chronologically, providing a clear timeline of the product's security posture over its entire lifecycle without relying on external or fragmented sources.

Vendor: NLnet Labs

CVE ID Title CVSS Severity Published
CVE-2026-44690 Cross-zone wildcard cache poisoning via RRSIG.labels manipulation CWE-345 7.5 High 2026-07-22
CVE-2026-44687 Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN CWE-193 3.7 Low 2026-07-22
CVE-2026-44621 Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated CWE-754 5.9 Medium 2026-07-22
CVE-2026-42955 Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records CWE-672 3.7 Low 2026-07-22
CVE-2026-41637 Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries CWE-772 3.7 Low 2026-07-22
CVE-2026-40691 Packet of death for DNSCrypt over TCP CWE-122 7.5 High 2026-07-22
CVE-2026-32665 Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass CWE-1284 7.5 High 2026-07-22
CVE-2026-14586 Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments CWE-617 5.9 Medium 2026-07-22
CVE-2026-44608 Use after free and crash under special conditions in RPZ code CWE-413 - - 2026-05-20
CVE-2026-44390 Unbounded name compression in certain cases causes degradation of service CWE-407 6.9 Medium 2026-05-20
CVE-2026-42960 Possible cache poisoning via promiscuous records for the authority section CWE-349 - - 2026-05-20
CVE-2026-42959 Crash during DNSSEC validation of malicious content CWE-824 8.7 High 2026-05-20
CVE-2026-42944 Heap overflow with multiple NSID, COOKIE, PADDING EDNS options CWE-197 8.7 High 2026-05-20
CVE-2026-42923 Degradation of service with unbounded NSEC3 hash calculations CWE-407 - - 2026-05-20
CVE-2026-42534 Jostle logic bypass degrades resolution performance CWE-440 6.9 Medium 2026-05-20
CVE-2026-41292 Long list of incoming EDNS options degrades performance CWE-407 6.6 Medium 2026-05-20
CVE-2026-40622 Another 'ghost domain names' attack variant - - 2026-05-20
CVE-2026-33278 Possible arbitrary code execution during DNSSEC validation CWE-416 9.1 Critical 2026-05-20
CVE-2026-32792 Packet of death with DNSCrypt CWE-166 - - 2026-05-20
CVE-2025-11411 Possible domain hijacking via promiscuous records in the authority section CWE-349 7.5AI High AI 2025-10-22
CVE-2025-5994 Cache poisoning via the ECS-enabled Rebirthday Attack CWE-349 5.3 - 2025-07-16
CVE-2024-8508 Unbounded name compression could lead to Denial of Service CWE-606 5.3 Medium 2024-10-03
CVE-2024-1931 Denial of service when trimming EDE text on positive replies CWE-835 7.5 High 2024-03-07
CVE-2022-3204 NRDelegation Attack 7.5 - 2022-09-26
CVE-2022-30699 Novel "ghost domain names" attack by updating almost expired delegation information 6.5 - 2022-08-01
CVE-2022-30698 Novel "ghost domain names" attack by introducing subdomain delegations 6.5 - 2022-08-01
CVE-2020-28935 Local symlink attack in Unbound and NSD CWE-59 7.8 - 2020-12-07
CVE-2020-10772 Unbound 资源管理错误漏洞 CWE-406 7.5 - 2020-11-27
CVE-2017-15105 Unbound 安全漏洞 CWE-358 5.3 - 2018-01-23

All 59 known CVE vulnerabilities affecting unbound with full Chinese analysis, references, and POCs where available.