CVE-2026-81634

7.5 Élevée

Publiée le 16/09/2026 à 11:17 · Modifiée le 23/09/2026 à 21:51 · Analysée par le NVD · Source : sep@nlnetlabs.nl

Description

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.

Traduire en français

Produits concernés

NLnet Labs Unbound
Nlnetlabs unbound

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	sep@nlnetlabs.nl	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-122

Références

https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-81634.txt PatchVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories