| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-56444 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound ... |
| CVE-2026-56416 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound up to and including version 1.25.1, when the val ... |
| CVE-2026-55991 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unau ... |
| CVE-2026-55990 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnsc ... |
| CVE-2026-55973 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-err ... |
| CVE-2026-55717 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-e ... |
| CVE-2026-55708 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_loca ... |
| CVE-2026-54478 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound ... |
| CVE-2026-52863 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that ma ... |
| CVE-2026-50252 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source po ... |
| CVE-2026-50251 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound up to and including version 1.25.1, when 'unwant ... |
| CVE-2026-50248 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/r ... |
| CVE-2026-50243 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound i ... |
| CVE-2026-50046 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS serve ... |
| CVE-2026-50045 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single clie ... |
| CVE-2026-46582 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a ... |
| CVE-2026-44690 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient v ... |
| CVE-2026-44687 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forwa ... |
| CVE-2026-44621 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | With NLnet Labs Unbound up to and including version 1.25.1, applicatio ... |
| CVE-2026-44608 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a loc ... |
| CVE-2026-44390 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerabil ... |
| CVE-2026-42960 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to ... |
| CVE-2026-42959 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound up to and including version 1.25.0 has a denial of ... |
| CVE-2026-42955 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vul ... |
| CVE-2026-42944 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vul ... |
| CVE-2026-42923 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerabil ... |
| CVE-2026-42534 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound up to and including version 1.25.0 has a vulnerabil ... |
| CVE-2026-41637 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client termin ... |
| CVE-2026-41292 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to ... |
| CVE-2026-40691 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is ... |
| CVE-2026-40622 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vul ... |
| CVE-2026-33278 | vulnerable | vulnerable | fixed | fixed | fixed | NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vul ... |
| CVE-2026-32665 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstre ... |
| CVE-2026-14586 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-Q ... |
| Bug | Description |
|---|
| CVE-2025-11411 | NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to ... |
| CVE-2025-5994 | A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' ... |
| CVE-2024-43168 | DISPUTE NOTE: this issue does not pose a security risk as it (accordin ... |
| CVE-2024-43167 | DISPUTE NOTE: this issue does not pose a security risk as it (accordin ... |
| CVE-2024-33655 | The DNS protocol in RFC 1035 and updates allows remote attackers to ca ... |
| CVE-2024-8508 | NLnet Labs Unbound up to and including version 1.21.0 contains a vulne ... |
| CVE-2024-1931 | NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 c ... |
| CVE-2024-1488 | A vulnerability was found in Unbound due to incorrect default permissi ... |
| CVE-2023-50868 | The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 whe ... |
| CVE-2023-50387 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6 ... |
| CVE-2022-30699 | NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable ... |
| CVE-2022-30698 | NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable t ... |
| CVE-2022-3204 | A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation ... |
| CVE-2020-28935 | NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs ... |
| CVE-2020-12663 | Unbound before 1.10.1 has an infinite loop via malformed DNS answers r ... |
| CVE-2020-12662 | Unbound before 1.10.1 has Insufficient Control of Network Message Volu ... |
| CVE-2020-10772 | An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Ha ... |
| CVE-2019-25042 | Unbound before 1.9.5 allows an out-of-bounds write via a compressed na ... |
| CVE-2019-25041 | Unbound before 1.9.5 allows an assertion failure via a compressed name ... |
| CVE-2019-25040 | Unbound before 1.9.5 allows an infinite loop via a compressed name in ... |
| CVE-2019-25039 | Unbound before 1.9.5 allows an integer overflow in a size calculation ... |
| CVE-2019-25038 | Unbound before 1.9.5 allows an integer overflow in a size calculation ... |
| CVE-2019-25037 | Unbound before 1.9.5 allows an assertion failure and denial of service ... |
| CVE-2019-25036 | Unbound before 1.9.5 allows an assertion failure and denial of service ... |
| CVE-2019-25035 | Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token ... |
| CVE-2019-25034 | Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dnam ... |
| CVE-2019-25033 | Unbound before 1.9.5 allows an integer overflow in the regional alloca ... |
| CVE-2019-25032 | Unbound before 1.9.5 allows an integer overflow in the regional alloca ... |
| CVE-2019-25031 | Unbound before 1.9.5 allows configuration injection in create_unbound_ ... |
| CVE-2019-18934 | Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec modul ... |
| CVE-2019-16866 | Unbound before 1.9.4 accesses uninitialized memory, which allows remot ... |
| CVE-2017-15105 | A flaw was found in the way unbound before 1.6.8 validated wildcard-sy ... |
| CVE-2014-8602 | iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegatio ... |
| CVE-2011-4869 | validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly per ... |
| CVE-2011-4528 | Unbound before 1.4.13p2 attempts to free unallocated memory during pro ... |
| CVE-2011-1922 | daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functiona ... |
| CVE-2010-0969 | Unbound before 1.4.3 does not properly align structures on 64-bit plat ... |
| CVE-2009-4008 | Unbound before 1.4.4 does not send responses for signed zones after mi ... |
| CVE-2009-3602 | Unbound before 1.3.4 does not properly verify signatures for NSEC3 rec ... |