CVE-2026-97206highCWE-416

CVE-2026-97206: falha de alta gravidade em NLnet Labs Unbound

DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Unbound+ Monitorar unbound

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

41Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 7.5epss 0.3%
da publicação à arma1 dia
Publicada no NVD21 de out.
1ª PoC+1d
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the DoQ stream. Cleanup frees the DoQ stream and when the pending mesh reply later completes it dereferences a stale pointer leading to a crash.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
NLnet Labs · Unbound
PoCs públicas encontradas — 1
githubgithub.com/suominen/CVE-2026-97206★ 0
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — NLnet Labs Unbound

No mesmo produto, das mais perigosas para as menos.

CVE-2024-1931HIGHDenial of service when trimming EDE text on positive repliesEPSS 2.5%CVE-2022-3204HIGHNRDelegation AttackEPSS 1.6%CVE-2026-33278CRITICALPossible arbitrary code execution during DNSSEC validationEPSS 1.4%CVE-2022-30699—Novel "ghost domain names" attack by updating almost expired delegation informationEPSS 1.2%CVE-2022-30698—Novel "ghost domain names" attack by introducing subdomain delegationsEPSS 1.2%CVE-2026-81642CRITICALHeap buffer overflow and possible Remote Code Execution when digesting DNSKEYEPSS 1.0%