CVE-2026-80225

EUVD-2026-80289
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolizes a single worker's entire event loop for as long as its writes stay ahead of the drain.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 41.58%
Affected Products (NVD)
VendorProductVersion
nlnetlabsunbound
𝑥
< 1.26.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
unbound
bookworm
vulnerable
bookworm (security)
vulnerable
forky
1.26.2-1
fixed
sid
1.26.2-1
fixed
trixie
vulnerable
trixie (security)
1.26.2-0+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
unbound
bionic
not-affected
focal
Fixed in 1.9.4-2ubuntu1.11+esm3
released
jammy
Fixed in 1.13.1-1ubuntu5.17
released
noble
Fixed in 1.19.2-1ubuntu3.12
released
resolute
Fixed in 1.24.2-1ubuntu2.4
released
stonking
needs-triage
trusty
not-affected
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libunbound8
suse enterprise desktop 15 SP7
1.26.1-150600.23.24.1
fixed
suse enterprise sap 15 SP4
1.26.1-150100.10.31.1
fixed
suse enterprise sap 15 SP5
1.26.1-150100.10.31.1
fixed
suse enterprise sap 15 SP6
1.26.1-150600.23.24.1
fixed
suse enterprise sap 15 SP7
1.26.1-150600.23.24.1
fixed
suse enterprise server 15 SP4
1.26.1-150100.10.31.1
fixed
suse enterprise server 15 SP5
1.26.1-150100.10.31.1
fixed
suse enterprise server 15 SP6
1.26.1-150600.23.24.1
fixed
suse enterprise server 15 SP7
1.26.1-150600.23.24.1
fixed
unbound-anchor
suse enterprise desktop 15 SP7
1.26.1-150600.23.24.1
fixed
suse enterprise sap 15 SP4
1.26.1-150100.10.31.1
fixed
suse enterprise sap 15 SP5
1.26.1-150100.10.31.1
fixed
suse enterprise sap 15 SP6
1.26.1-150600.23.24.1
fixed
suse enterprise sap 15 SP7
1.26.1-150600.23.24.1
fixed
suse enterprise server 15 SP4
1.26.1-150100.10.31.1
fixed
suse enterprise server 15 SP5
1.26.1-150100.10.31.1
fixed
suse enterprise server 15 SP6
1.26.1-150600.23.24.1
fixed
suse enterprise server 15 SP7
1.26.1-150600.23.24.1
fixed
unbound-devel
suse enterprise desktop 15 SP7
1.26.1-150600.23.24.1
fixed
suse enterprise sap 15 SP4
1.26.1-150100.10.31.1
fixed
suse enterprise sap 15 SP5
1.26.1-150100.10.31.1
fixed
suse enterprise sap 15 SP6
1.26.1-150600.23.24.1
fixed
suse enterprise sap 15 SP7
1.26.1-150600.23.24.1
fixed
suse enterprise server 15 SP4
1.26.1-150100.10.31.1
fixed
suse enterprise server 15 SP5
1.26.1-150100.10.31.1
fixed
suse enterprise server 15 SP6
1.26.1-150600.23.24.1
fixed
suse enterprise server 15 SP7
1.26.1-150600.23.24.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
python3-unbound
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
python3-unbound-debuginfo
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-anchor
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-anchor-debuginfo
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-debuginfo
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-debugsource
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-devel
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-libs
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-libs-debuginfo
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-utils
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
unbound-utils-debuginfo
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.15
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
unbound
Azure Linux 3.0
0:1.26.1-1.azl3
fixed
Common Weakness Enumeration
References
https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-80225.txt