Red Hat Security Advisory

RHSA-2026:24369

unbound security update

Released 2026-06-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python3-unbound-1.24.2-3.el9_8.1, unbound-1.24.2-3.el9_8.1, unbound-dracut-1.24.2-3.el9_8.1 +1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) unbound-devel-1.24.2-3.el9_8.1

Fixes 3 records

TI-2026-25690 CVE-2026-33278 · GHSA-m234-r435-cxjw

Possible arbitrary code execution during DNSSEC validation

MEDIUM 50

NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0142 Published 2026-05-20 Partial fix · 1.25.1 CWE-416

TI-2026-31146 CVE-2026-42959 · GHSA-5jp8-75xr-qrmf

Crash during DNSSEC validation of malicious content

MEDIUM 45

NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00807 Published 2026-05-20 Partial fix · 1.25.1 CWE-824

TI-2026-31135 CVE-2026-42944 · GHSA-7mmq-q3m9-jrv7

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

MEDIUM 45

NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00842 Published 2026-05-20 Partial fix · 1.25.1 CWE-197