Logo
vulnerabilityCVE-2026-50045
Name
CVE-2026-50045
Source
NVD ( link)Debian ( link)
Description
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypasses a security configuration that limits upstream amplification traffic.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
unbound
Exploitable

Vulnerability Ratings#


5.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
1.25.1
Exploitable
openwrt
master
1.25.2-r1
Not Affected
openwrt
openwrt-25.12
1.25.2-r1
Not Affected
yocto
kirkstone
1.15.0
Not Affected
yocto
master
1.26.0
Not Affected
yocto
scarthgap
1.19.3
Not Affected