Threats Tagged 'cve-2026-41292'

Multiple security vulnerabilities have been identified in the unbound DNS resolver packages used in Red Hat Enterprise Linux 8. These include denial of service issues caused by excessive EDNS options, large DNS resource record sets, and degraded resolution performance, as well as a cache manipulation vulnerability via a 'ghost domain names' attack. Red Hat has issued an important security advisory with updates addressing these issues.

Multiple security vulnerabilities have been identified in the unbound DNS resolver packages used in Red Hat Enterprise Linux 9. These include denial of service issues caused by excessive EDNS options, large DNS resource record sets, and degraded resolution performance, as well as a cache manipulation vulnerability via 'ghost domain names'. Red Hat has released security updates addressing these issues.

Multiple security vulnerabilities affecting the unbound DNS resolver in Red Hat Enterprise Linux 10 have been addressed. These include denial of service issues caused by excessive EDNS options, large DNS resource record sets, and degraded resolution performance, as well as a cache manipulation vulnerability via 'ghost domain names'. The vulnerabilities have been rated with a security impact of Important by Red Hat Product Security. Updates are available to remediate these issues in Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products across multiple architectures.

This update includes the following RPMs: unbound: * python3-unbound-1.25.1-2.hum1 (aarch64, x86_64) * unbound-1.25.1-2.hum1 (aarch64, x86_64) * unbound-anchor-1.25.1-2.hum1 (aarch64, x86_64) * unbound-devel-1.25.1-2.hum1 (aarch64, x86_64) * unbound-dracut-1.25.1-2.hum1 (aarch64, x86_64) * unbound-libs-1.25.1-2.hum1 (aarch64, x86_64) * unbound-munin-1.25.1-2.hum1 (noarch) * unbound-utils-1.25.1-2.hum1 (aarch64, x86_64) * unbound-1.25.1-2.hum1.src (src)

This update includes the following RPMs: unbound: * python3-unbound-1.25.1-1.hum1 (aarch64, x86_64) * unbound-1.25.1-1.hum1 (aarch64, x86_64) * unbound-anchor-1.25.1-1.hum1 (aarch64, x86_64) * unbound-devel-1.25.1-1.hum1 (aarch64, x86_64) * unbound-dracut-1.25.1-1.hum1 (aarch64, x86_64) * unbound-libs-1.25.1-1.hum1 (aarch64, x86_64) * unbound-munin-1.25.1-1.hum1 (noarch) * unbound-utils-1.25.1-1.hum1 (aarch64, x86_64) * unbound-1.25.1-1.hum1.src (src)

NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they are parsing and creating internal data structures for the options. Coordinated attacks can result in degradation and/or denial of service. Unbound 1.25.1 contains a patch with a fix to limit acceptable incoming EDNS options (100).