점검 대응긴급KEV 미등록
CVE-2026-33278
NLnet Labs Unbound, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 취약점
NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a destination pointer. An adversary can exploit the vulnerability by controlling a malicious signed zone and querying a vulnerable Unbound. When DS sub-queries need to suspend validation due to NSEC3 computational budget exhaustion (introduced in Unbound 1.19.1), Unbound deep-copies response messages to preserve them across memory region teardown. A s...
- 대응 우선순위
- 점검
- CVSS
- 9.1
- EPSS
- 1.27% 백분위 67.0% · 2026.08.02 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.05.20