Attestkeep
Sprache: Deutsch
Loslegen

Schwachstellen / CVE-2026-81642

kritisch

CVE-2026-81642

unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

Veröffentlicht Geändert CWE 122
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat, AlmaLinux, Amazon, Oracle, Photon OS, Rocky Linux. Niedriger laut Azure Linux (hoch), Ubuntu (mittel).

Beschreibung

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.

Betroffene Pakete und behobene Versionen

QuellePaketBehoben in
alma 10python3-unbound, unbound, unbound-anchor und 4 weitere1.24.2-7.el10_2.6
alma 8python3-unbound, unbound, unbound-devel und 1 weitere1.16.2-5.14.el8_10.4
alma 9python3-unbound, unbound, unbound-devel und 2 weitere1.24.2-3.el9_8.8
amazon linux 2python2-unbound, python3-unbound, unbound und 3 weitere1.7.3-15.amzn2.0.16
amazon linux 2023python3-unbound, python3-unbound-debuginfo, unbound und 9 weitere1.17.1-1.amzn2023.0.14
Oracle Linux 7unbound, unbound-devel, unbound-libs und 1 weitere1.6.6-5.0.3.el7_8
Oracle Linux 8python3-unbound, unbound, unbound-devel und 1 weitere1.16.2-5.14.el8_10.4
Oracle Linux 9python3-unbound, unbound, unbound-devel und 2 weitere1.24.2-3.el9_8.8
Photon OS 5.0unbound, unbound-devel, unbound-docs1.26.1-1.ph5
Red Hatunbound, unbound-devel, unbound-libs und 1 weiterekein Fix angegeben
rocky 10python3-unbound, unbound, unbound-anchor und 3 weitere1.24.2-7.el10_2.6
rocky 8python3-unbound, unbound, unbound-devel und 1 weitere1.16.2-5.14.el8_10.4
Alle 152 Einträge aus 47 Quellen zeigen
QuellePaketBehoben in
alma 10python3-unbound1.24.2-7.el10_2.6
alma 10unbound1.24.2-7.el10_2.6
alma 10unbound-anchor1.24.2-7.el10_2.6
alma 10unbound-devel1.24.2-7.el10_2.6
alma 10unbound-dracut1.24.2-7.el10_2.6
alma 10unbound-libs1.24.2-7.el10_2.6
alma 10unbound-utils1.24.2-7.el10_2.6
alma 8python3-unbound1.16.2-5.14.el8_10.4
alma 8unbound1.16.2-5.14.el8_10.4
alma 8unbound-devel1.16.2-5.14.el8_10.4
alma 8unbound-libs1.16.2-5.14.el8_10.4
alma 9python3-unbound1.24.2-3.el9_8.8
alma 9unbound1.24.2-3.el9_8.8
alma 9unbound-devel1.24.2-3.el9_8.8
alma 9unbound-dracut1.24.2-3.el9_8.8
alma 9unbound-libs1.24.2-3.el9_8.8
amazon linux 2python2-unbound1.7.3-15.amzn2.0.16
amazon linux 2python3-unbound1.7.3-15.amzn2.0.16
amazon linux 2unbound1.7.3-15.amzn2.0.16
amazon linux 2unbound-debuginfo1.7.3-15.amzn2.0.16
amazon linux 2unbound-devel1.7.3-15.amzn2.0.16
amazon linux 2unbound-libs1.7.3-15.amzn2.0.16
amazon linux 2023python3-unbound1.17.1-1.amzn2023.0.14
amazon linux 2023python3-unbound-debuginfo1.17.1-1.amzn2023.0.14
amazon linux 2023unbound1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-anchor1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-anchor-debuginfo1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-debuginfo1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-debugsource1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-devel1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-libs1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-libs-debuginfo1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-utils1.17.1-1.amzn2023.0.14
amazon linux 2023unbound-utils-debuginfo1.17.1-1.amzn2023.0.14
Oracle Linux 7unbound1.6.6-5.0.3.el7_8
Oracle Linux 7unbound-devel1.6.6-5.0.3.el7_8
Oracle Linux 7unbound-libs1.6.6-5.0.3.el7_8
Oracle Linux 7unbound-python1.6.6-5.0.3.el7_8
Oracle Linux 8python3-unbound1.16.2-5.14.el8_10.4
Oracle Linux 8unbound1.16.2-5.14.el8_10.4
Oracle Linux 8unbound-devel1.16.2-5.14.el8_10.4
Oracle Linux 8unbound-libs1.16.2-5.14.el8_10.4
Oracle Linux 9python3-unbound1.24.2-3.el9_8.8
Oracle Linux 9unbound1.24.2-3.el9_8.8
Oracle Linux 9unbound-devel1.24.2-3.el9_8.8
Oracle Linux 9unbound-dracut1.24.2-3.el9_8.8
Oracle Linux 9unbound-libs1.24.2-3.el9_8.8
Photon OS 5.0unbound1.26.1-1.ph5
Photon OS 5.0unbound-devel1.26.1-1.ph5
Photon OS 5.0unbound-docs1.26.1-1.ph5
Red Hatunboundkein Fix angegeben
Red Hatunbound-develkein Fix angegeben
Red Hatunbound-libskein Fix angegeben
Red Hatunbound-pythonkein Fix angegeben
rocky 10python3-unbound1.24.2-7.el10_2.6
rocky 10unbound1.24.2-7.el10_2.6
rocky 10unbound-anchor1.24.2-7.el10_2.6
rocky 10unbound-dracut1.24.2-7.el10_2.6
rocky 10unbound-libs1.24.2-7.el10_2.6
rocky 10unbound-utils1.24.2-7.el10_2.6
rocky 8python3-unbound1.16.2-5.14.el8_10.4
rocky 8unbound1.16.2-5.14.el8_10.4
rocky 8unbound-devel1.16.2-5.14.el8_10.4
rocky 8unbound-libs1.16.2-5.14.el8_10.4
rocky 9python3-unbound1.24.2-3.el9_8.8
rocky 9unbound1.24.2-3.el9_8.8
rocky 9unbound-dracut1.24.2-3.el9_8.8
rocky 9unbound-libs1.24.2-3.el9_8.8
alpine 3.22unbound1.25.2-r0
alpine 3.23unbound1.25.2-r0
alpine 3.24unbound1.25.2-r2
alpine edgeunbound1.26.1-r0
Azure Linux 3.0unbound0:1.26.1-1.azl3
debian 11unboundkein Fix angegeben
debian 12unboundkein Fix angegeben
debian 13unbound1.26.1-0+deb13u1
debian 14unbound1.26.1-1
echounbound1.26.1
rapidfort alma 10python3-unbound1.24.2-7.el10_2.6
rapidfort alma 10unbound0:1.24.2-7.el10_2.6
rapidfort alma 10unbound-anchor0:1.24.2-7.el10_2.6
rapidfort alma 10unbound-devel1.24.2-7.el10_2.6
rapidfort alma 10unbound-dracut1.24.2-7.el10_2.6
rapidfort alma 10unbound-libs0:1.24.2-7.el10_2.6
rapidfort alma 10unbound-utils1.24.2-7.el10_2.6
rapidfort alma 9python3-unbound1.24.2-3.el9_8.8
rapidfort alma 9unbound0:1.24.2-3.el9_8.8
rapidfort alma 9unbound-dracut1.24.2-3.el9_8.8
rapidfort alma 9unbound-libs0:1.24.2-3.el9_8.8
rapidfort alpine 3.20unbound1.25.2-r0
rapidfort alpine 3.21unbound1.25.2-r0
rapidfort alpine 3.22unbound1.25.2-r0
rapidfort alpine 3.23unbound1.25.2-r0
rapidfort alpine 3.24unbound1.25.2-r2
rapidfort amazon linux 2023python3-unbound1.17.1-1.amzn2023.0.14
rapidfort amazon linux 2023unbound0:1.17.1-1.amzn2023.0.14
rapidfort amazon linux 2023unbound-anchor0:1.17.1-1.amzn2023.0.14
rapidfort amazon linux 2023unbound-devel1.17.1-1.amzn2023.0.14
rapidfort amazon linux 2023unbound-libs0:1.17.1-1.amzn2023.0.14
rapidfort amazon linux 2023unbound-utils1.17.1-1.amzn2023.0.14
rapidfort debian 12rf-unbound0:1.26.1-0+deb13u1, 0:1.26.1-1
rapidfort debian 12unbound0:1.26.1-0+deb13u1, 0:1.26.1-1
rapidfort debian 13rf-unbound0:1.26.1-0+deb13u1, 0:1.26.1-1
rapidfort debian 13unbound0:1.26.1-0+deb13u1, 0:1.26.1-1
rapidfort fedora 41rf-unbound0:1.24.1-2.fc41
rapidfort fedora 41rf-unbound-anchor0:1.24.1-2.fc41
rapidfort fedora 41rf-unbound-libs0:1.24.1-2.fc41
rapidfort fedora 41unbound0:1.24.1-2.fc41
rapidfort fedora 41unbound-anchor0:1.24.1-2.fc41
rapidfort fedora 41unbound-libs0:1.24.1-2.fc41
rapidfort fedora 43python3-unbound1.26.1-1.fc43
rapidfort fedora 43rf-unbound0:1.26.1-1.fc43
rapidfort fedora 43rf-unbound-anchor0:1.26.1-1.fc43
rapidfort fedora 43rf-unbound-libs0:1.26.1-1.fc43
rapidfort fedora 43unbound0:1.26.1-1.fc43
rapidfort fedora 43unbound-anchor0:1.26.1-1.fc43
rapidfort fedora 43unbound-devel1.26.1-1.fc43
rapidfort fedora 43unbound-dracut1.26.1-1.fc43
rapidfort fedora 43unbound-libs0:1.26.1-1.fc43
rapidfort fedora 43unbound-munin1.26.1-1.fc43
rapidfort fedora 43unbound-utils1.26.1-1.fc43
rapidfort Oracle Linux 10python3-unbound0:1.24.2-7.el10_2.6
rapidfort Oracle Linux 10unbound0:1.24.2-7.el10_2.6
rapidfort Oracle Linux 10unbound-anchor0:1.24.2-7.el10_2.6
rapidfort Oracle Linux 10unbound-devel0:1.24.2-7.el10_2.6
rapidfort Oracle Linux 10unbound-dracut0:1.24.2-7.el10_2.6
rapidfort Oracle Linux 10unbound-libs0:1.24.2-7.el10_2.6
rapidfort Oracle Linux 10unbound-utils0:1.24.2-7.el10_2.6
rapidfort Oracle Linux 9python3-unbound0:1.24.2-3.el9_8.8
rapidfort Oracle Linux 9unbound0:1.24.2-3.el9_8.8
rapidfort Oracle Linux 9unbound-devel0:1.24.2-3.el9_8.8
rapidfort Oracle Linux 9unbound-dracut0:1.24.2-3.el9_8.8
rapidfort Oracle Linux 9unbound-libs0:1.24.2-3.el9_8.8
rapidfort rocky 9python3-unbound0:1.24.2-3.el9_8.8
rapidfort rocky 9rf-unbound0:1.24.2-3.el9_8.8
rapidfort rocky 9rf-unbound-libs0:1.24.2-3.el9_8.8
rapidfort rocky 9unbound0:1.24.2-3.el9_8.8
rapidfort rocky 9unbound-dracut0:1.24.2-3.el9_8.8
rapidfort rocky 9unbound-libs0:1.24.2-3.el9_8.8
rapidfort ubuntu 20.04rf-unbound0:1.13.1-1ubuntu5.16, 0:1.19.2-1ubuntu3.10, 0:1.24.2-1ubuntu2.3
rapidfort ubuntu 20.04unbound0:1.13.1-1ubuntu5.16, 0:1.19.2-1ubuntu3.10, 0:1.24.2-1ubuntu2.3
rapidfort ubuntu 22.04rf-unbound0:1.13.1-1ubuntu5.16, 0:1.19.2-1ubuntu3.10, 0:1.24.2-1ubuntu2.3
rapidfort ubuntu 22.04unbound0:1.13.1-1ubuntu5.16, 0:1.19.2-1ubuntu3.10, 0:1.24.2-1ubuntu2.3
rapidfort ubuntu 24.04rf-unbound0:1.13.1-1ubuntu5.16, 0:1.19.2-1ubuntu3.10, 0:1.24.2-1ubuntu2.3
rapidfort ubuntu 24.04unbound0:1.13.1-1ubuntu5.16, 0:1.19.2-1ubuntu3.10, 0:1.24.2-1ubuntu2.3
seal Red Hat 8seal-unbound1.16.2-5.8.el8_10+sp999
seal Red Hat 8unbound1.16.2-5.8.el8_10+sp999
ubuntu 18.04-ESMunbound1.6.7-1ubuntu2.6+esm5
ubuntu 20.04-ESMunbound1.9.4-2ubuntu1.11+esm2
ubuntu 22.04unbound1.13.1-1ubuntu5.16
ubuntu 24.04unbound1.19.2-1ubuntu3.10
ubuntu 26.04unbound1.24.2-1ubuntu2.3

Referenzen

Alle 21 Referenzen

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.