AZL-92925
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92925.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-92925
- Upstream
- Published
- 2026-07-22T14:17:19Z
- Modified
- 2026-08-28T17:47:24Z
- Summary
- CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1
- Details
-
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypasses a security configuration that limits upstream amplification traffic.
- References