Description
NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they are parsing and creating internal data structures for the options. Coordinated attacks can result in degradation and/or denial of service. Unbound 1.25.1 contains a patch with a fix to limit acceptable incoming EDNS options (100).
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| NLnet Labs | Unbound | < 1.25.1 |
| Red Hat | Red Hat Enterprise Linux 10 | — |
| Red Hat | Red Hat Enterprise Linux 8 | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | — |
| Red Hat | Red Hat Hardened Images | — |
| Red Hat | Red Hat Data Grid 8 | — |
| Red Hat | Red Hat Enterprise Linux 6 | — |
| Red Hat | Red Hat Enterprise Linux 7 | — |
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | — |
| Red Hat | Red Hat OpenStack Platform 16.2 | — |
| Red Hat | Red Hat OpenStack Platform 17.1 | — |
| Red Hat | Red Hat OpenStack Platform 18.0 | — |
| Red Hat | Red Hat OpenStack Platform 18.0 | — |
References
- https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-41292.txtMitigation, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:24013
- https://access.redhat.com/errata/RHSA-2026:36320
- https://access.redhat.com/errata/RHSA-2026:36777
- https://access.redhat.com/errata/RHSA-2026:37282
- https://access.redhat.com/errata/RHSA-2026:54769
- https://access.redhat.com/security/cve/CVE-2026-41292
- https://bugzilla.redhat.com/show_bug.cgi?id=2480125
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41292.json
Timeline
- Published
- May 20, 2026
- Last modified
- Aug 26, 2026
- NVD status
- Modified