https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:05:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-32792 <p><strong>Affected:</strong> NLnet Labs Unbound</p> <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;). A bad DNSCrypt query could underflow Unbound&#39;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &#39;0x00&#39; bytes and does not contain the expected &#39;0x80&#39; marker. Unbound would then start reading more bytes than necessary until it finds a non-&#39;0x00&#39; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&#39;s later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.</p> <p><strong>Affected:</strong> NLnet Labs Unbound</p> <p>NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support (&#39;--enable-dnscrypt&#39;). A bad DNSCrypt query could underflow Unbound&#39;s DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of &#39;0x00&#39; bytes and does not contain the expected &#39;0x80&#39; marker. Unbound would then start reading more bytes than necessary until it finds a non-&#39;0x00&#39; byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound&#39;s later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.</p> https://vulnerability.circl.lu/vuln/cve-2026-32792