Skip to content

CVE-2026-81634 on Cyberus Linux 26.05

Aliases: CVE-2026-81634

Packages: unbound

Status: In Progress

Advisory Information

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.

Updates

2026-09-22 11:14 CEST

Metadata changes:

  • Status for package unbound: “In Progress”

2026-09-22 11:07 CEST

Metadata changes:

  • Status for package unbound: “New”