Author Archives: Syndicated News

Information published. Continue reading CVE-2026-55990 Packet of death for a DNSCrypt misconfigured Unbound→

Information published. Continue reading CVE-2026-50046 Possible heap use-after-free in an error path when a DoT forwarded query is jostled out→

Information published. Continue reading CVE-2026-14586 Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments→

Information published. Continue reading CVE-2026-42955 Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time ‘ghost domain’ delegation renewal via glue records→

Information published. Continue reading CVE-2026-46582 A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path→

Information published. Continue reading CVE-2026-54478 DNS Cookie bypass when combined with proxy-protocol use→

Information published. Continue reading CVE-2026-56444 Degradation of resolution service when ‘discard-timeout’ and ‘serve-expired-client-timeout’ are combined in unusual configuration→

Information published. Continue reading CVE-2026-32665 Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass→