점검 대응높음KEV 미등록
CVE-2026-42944
NLnet Labs Unbound, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8 취약점
NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid', 'answer-cookie', 'pad-responses' (default)) need to be enabled for the vulnerability to be exploited. An adversary who can query Unbound can exploit the vulnerability by attaching multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options to the query. A flaw in the size calculation of the EDNS field truncates the correct value which allows the enc...
- 대응 우선순위
- 점검
- CVSS
- 8.7
- EPSS
- 0.84% 백분위 54.3% · 2026.08.02 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.05.20