Threats Tagged 'cve-2026-42944'
View all threats tagged with 'cve-2026-42944'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-42944'
Click on any threat for detailed analysis and mitigation recommendations
0 A heap overflow vulnerability exists in Unbound DNS resolver when processing multiple NSID, cookie, and padding EDNS options. This flaw can cause the Unbound service to crash, resulting in denial of service (DoS). The vulnerability affects certain versions of Unbound as shipped by Red Hat. No mitigation is currently available that meets Red Hat's criteria for ease of use and stability. Join the discussion | GCVE Database | 06/08/2026, 08:53:35 UTC Added: 06/08/2026, 21:20:14 UTC |
0 This update includes the following RPMs: unbound: * python3-unbound-1.25.1-1.hum1 (aarch64, x86_64) * unbound-1.25.1-1.hum1 (aarch64, x86_64) * unbound-anchor-1.25.1-1.hum1 (aarch64, x86_64) * unbound-devel-1.25.1-1.hum1 (aarch64, x86_64) * unbound-dracut-1.25.1-1.hum1 (aarch64, x86_64) * unbound-libs-1.25.1-1.hum1 (aarch64, x86_64) * unbound-munin-1.25.1-1.hum1 (noarch) * unbound-utils-1.25.1-1.hum1 (aarch64, x86_64) * unbound-1.25.1-1.hum1.src (src) Join the discussion | GCVE Database | 05/23/2026, 20:39:46 UTC Added: 06/06/2026, 21:13:43 UTC |
0 This update includes the following RPMs: unbound: * python3-unbound-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-anchor-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-devel-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-dracut-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-libs-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-munin-1.25.1-0.1.hum1 (noarch) * unbound-utils-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-1.25.1-0.1.hum1.src (src) Join the discussion | GCVE Database | 05/20/2026, 17:20:01 UTC Added: 06/04/2026, 21:16:09 UTC |
NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid', 'answer-cookie', 'pad-responses' (default)) need to be enabled for the vulnerability to be exploited. An adversary who can query Unbound can exploit the vulnerability by attaching multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options to the query. A flaw in the size calculation of the EDNS field truncates the correct value which allows the encoder to overflow the available space when writing. Those two combined lead to a heap overflow write of Unbound controlled data and eventually a crash. Unbound 1.25.1 contains a patch with a fix to de-duplicate the EDNS options and a fix to prevent truncation of the EDNS field size calculation. Join the discussion | CVE Database V5 | 05/20/2026, 09:20:23 UTC Added: 05/20/2026, 10:03:41 UTC |
Showing 1 to 4 of 4 results