Количество 16
Количество 16
BDU:2026-12817
Уязвимость библиотеки DNS LDNS, связанная с недостатком в механизме подтверждения источника, позволяющая нарушителю оказать воздействие на целостность данных
CVE-2026-10846
NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability.
CVE-2026-10846
NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability.
CVE-2026-10846
NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability.
CVE-2026-10846
Insufficient verification that responses belong to a query
CVE-2026-10846
NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in ...
openSUSE-SU-2026:21093-1
Security update for ldns
SUSE-SU-2026:2462-1
Security update for ldns
SUSE-SU-2026:2461-1
Security update for ldns
RLSA-2026:50108
Important: ldns security update
RLSA-2026:49836
Important: ldns security update
RLSA-2026:49520
Important: ldns security update
GHSA-x77r-8q36-8529
NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability.
ELSA-2026-50108-0
ELSA-2026-50108-0: ldns security update (IMPORTANT)
ELSA-2026-49836
ELSA-2026-49836: ldns security update (IMPORTANT)
ELSA-2026-49520
ELSA-2026-49520: ldns security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-12817 Уязвимость библиотеки DNS LDNS, связанная с недостатком в механизме подтверждения источника, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-10846 NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-10846 NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-10846 NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-10846 Insufficient verification that responses belong to a query | 0% Низкий | 3 месяца назад | |
| CVE-2026-10846 NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in ... | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:21093-1 Security update for ldns | 0% Низкий | 3 месяца назад | |
| SUSE-SU-2026:2462-1 Security update for ldns | 0% Низкий | 3 месяца назад | |
| SUSE-SU-2026:2461-1 Security update for ldns | 0% Низкий | 3 месяца назад | |
 | RLSA-2026:50108 Important: ldns security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2026:49836 Important: ldns security update | 0% Низкий | около 2 месяцев назад | |
| RLSA-2026:49520 Important: ldns security update | 0% Низкий | около 2 месяцев назад | |
| GHSA-x77r-8q36-8529 NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| ELSA-2026-50108-0 ELSA-2026-50108-0: ldns security update (IMPORTANT) | 0% Низкий | около 2 месяцев назад | |
| ELSA-2026-49836 ELSA-2026-49836: ldns security update (IMPORTANT) | 0% Низкий | около 2 месяцев назад | |
| ELSA-2026-49520 ELSA-2026-49520: ldns security update (IMPORTANT) | 0% Низкий | около 2 месяцев назад |
Уязвимостей на страницу