sep@nlnetlabs.nl
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS sep@nlnetlabs.nl
03
assessed vulnerabilities (77)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-97206US | — | Exploit | ||
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client… | ||||
| CVE-2026-96405US | — | — | ||
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work… | ||||
| CVE-2026-50106US | — | — | ||
When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent… | ||||
| CVE-2026-35501US | — | — | ||
When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose… | ||||
| CVE-2026-109125US | — | — | ||
In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default c… | ||||
| CVE-2026-101341US | — | — | ||
Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack… | ||||
| CVE-2026-101339US | — | — | ||
A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker… | ||||
| CVE-2026-101338US | — | — | ||
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write atta… | ||||
| CVE-2026-101337US | — | — | ||
When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K… | ||||
| CVE-2026-85501US | high7.5 | — | ||
Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service when malicious zones a… | ||||
| CVE-2026-82720US | — | — | ||
NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths… | ||||
| CVE-2026-82717US | critical9.8 | — | ||
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could le… | ||||
| CVE-2026-81642US | critical9.8 | Exploit | ||
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of… | ||||
| CVE-2026-81634US | — | — | ||
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. Th… | ||||
| CVE-2026-80225US | high7.5 | — | ||
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A… | ||||
| CVE-2026-78227US | — | — | ||
NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with '--with-libngtcp2'. Each DoQ stream owns an ou… | ||||
| CVE-2026-77955US | —OT elevated | — | ||
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which are located below (but not at) a trust anchor allow fo… | ||||
| CVE-2026-77860US | — | — | ||
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP esse… | ||||
| CVE-2026-19538US | high7.5 | — | ||
The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the qu… | ||||
| CVE-2026-19401US | high7.5 | — | ||
Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 whe… | ||||