Product by Ubuntu
Unbound
23 known vulnerabilities in Unbound (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-50387 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2023-50868 | ISC BIND 9: Denial of Service | 7.5 | |
| Critical | CVE-2026-33278 | Possible arbitrary code execution during DNSSEC validation | 9.8 | |
| Critical | CVE-2026-81642 | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY | 9.8 | |
| Critical | CVE-2026-82717 | CNAME synthesis could lead to heap corruption | 9.8 | |
| High | CVE-2026-42944 | Heap overflow with multiple NSID, COOKIE, PADDING EDNS options | 7.5 | |
| High | CVE-2026-42959 | Crash during DNSSEC validation of malicious content | 7.5 | |
| High | CVE-2026-41292 | Long list of incoming EDNS options degrades performance | 7.5 | |
| High | CVE-2026-81634 | Possible heap buffer overflow during DNSSEC canonicalization | 7.5 | |
| Medium | CVE-2026-44390 | Unbounded name compression in certain cases causes degradation of service | 5.3 | |
| Medium | CVE-2026-42534 | Jostle logic bypass degrades resolution performance | 5.3 | |
| Critical | CVE-2026-42960 | Possible cache poisoning via promiscuous records for the authority section | 10.0 | |
| Critical | CVE-2026-50252 | Possible cache poisoning attack by mapping source port population per thread | 9.3 | |
| High | CVE-2026-80225 | Possible degradation of service from continuous queries on the same TCP/DoT connection | 5.3 | |
| High | CVE-2026-85501 | Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC | 5.3 | |
| High | CVE-2026-40691 | Packet of death for DNSCrypt over TCP | 7.5 | |
| High | CVE-2026-32665 | Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass | 7.5 | |
| High | CVE-2026-55973 | 'dns-error-reporting: yes' leads to stack buffer overflow | 7.5 | |
| High | CVE-2026-44690 | Cross-zone wildcard cache poisoning via RRSIG.labels manipulation | 7.5 | |
| Medium | CVE-2026-42923 | Degradation of service with unbounded NSEC3 hash calculations | 5.3 | |
| High | CVE-2026-40622 | Another 'ghost domain names' attack variant | 7.5 | |
| Medium | CVE-2026-32792 | Packet of death with DNSCrypt | 5.3 | |
| Medium | CVE-2026-44608 | Use after free and crash under special conditions in RPZ code | 5.9 |