Threats Tagged 'cve-2026-42959'
View all threats tagged with 'cve-2026-42959'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-42959'
Click on any threat for detailed analysis and mitigation recommendations
0 A heap overflow vulnerability exists in Unbound DNS resolver when processing multiple NSID, cookie, and padding EDNS options. This flaw can cause the Unbound service to crash, resulting in denial of service (DoS). The vulnerability affects certain versions of Unbound as shipped by Red Hat. No mitigation is currently available that meets Red Hat's criteria for ease of use and stability. Join the discussion | GCVE Database | 06/08/2026, 08:53:35 UTC Added: 06/08/2026, 21:20:14 UTC |
0 This update includes the following RPMs: unbound: * python3-unbound-1.25.1-1.hum1 (aarch64, x86_64) * unbound-1.25.1-1.hum1 (aarch64, x86_64) * unbound-anchor-1.25.1-1.hum1 (aarch64, x86_64) * unbound-devel-1.25.1-1.hum1 (aarch64, x86_64) * unbound-dracut-1.25.1-1.hum1 (aarch64, x86_64) * unbound-libs-1.25.1-1.hum1 (aarch64, x86_64) * unbound-munin-1.25.1-1.hum1 (noarch) * unbound-utils-1.25.1-1.hum1 (aarch64, x86_64) * unbound-1.25.1-1.hum1.src (src) Join the discussion | GCVE Database | 05/23/2026, 20:39:46 UTC Added: 06/06/2026, 21:13:43 UTC |
0 This update includes the following RPMs: unbound: * python3-unbound-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-anchor-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-devel-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-dracut-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-libs-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-munin-1.25.1-0.1.hum1 (noarch) * unbound-utils-1.25.1-0.1.hum1 (aarch64, x86_64) * unbound-1.25.1-0.1.hum1.src (src) Join the discussion | GCVE Database | 05/20/2026, 17:20:01 UTC Added: 06/04/2026, 21:16:09 UTC |
NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code uses the wrong counter to calculate write offsets for ADDITIONAL section rrsets. DNAME duplication could increase the ANSWER section count and authority filtering could decrease the AUTHORITY section count and create an uninitialized array slot. Combining these two, the validator later dereferences this uninitialized pointer, causing an immediate process crash. An adversary controlling a DNSSEC-signed domain can trigger this bug with a single query by configuring a DNAME chain with unsigned CNAMEs and a response containing unsigned AUTHORITY records alongside signed ADDITIONAL glue records. Unbound 1.25.1 contains a patch with a fix to use the proper counters to calculate the write offsets. Join the discussion | CVE Database V5 | 05/20/2026, 09:20:45 UTC Added: 05/20/2026, 10:03:41 UTC |
Showing 1 to 4 of 4 results