Vulnerabilidad · Publicado 21/10/2026
NLnet Labs Unbound versiones 1.22.0 a 1.26.1 contiene un defecto de ciclo de vida en DNS-over-QUIC (DoQ) que permite a clientes remotos causar condiciones de use-after-free mediante migraciones de rutas QUIC en operación multi-thread. Esta vulnerabilidad afecta a proveedores de servicios de Internet y empresas que operan resolvedores DNS autoritativos o recursivos en infraestructuras altas de LATAM, causando potencial negación de servicio o corrupción de datos DNS.
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the DoQ stream. Cleanup frees the DoQ stream and when the pending mesh reply later completes it dereferences a stale pointer leading to a crash.
Score: 7.5/10 — Severidad: HIGH — Estado NIST: Received
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-416
Publicado en NIST NVD.