VulertSecurity VulertSecurity

Vulnerability Database · Debian · unbound · Version

unbound 1.13.1-1

1.13.1-1 is affected by 52 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 0 Medium 0 Low 0 Unrated 52

All unbound versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

unbound 1.13.1-1 vulnerabilities

52 vulnerabilities cover unbound 1.13.1-1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Heap Buffer Overflow in Unbound DNS Resolver N/A unrated No fix published 22 Jul 2026
Critical Denial of Service Vulnerability in Unbound DNS Resolver N/A unrated No fix published 22 Jul 2026
Cache Poisoning Vulnerability in Unbound DNS Resolver N/A unrated No fix published 22 Jul 2026
Critical Vulnerability in Unbound: Client Terminated DNS-over-QUIC Queries N/A unrated No fix published 22 Jul 2026
Unbound Package Vulnerability: Client Reply Dropping Issue N/A unrated No fix published 22 Jul 2026
Unbound DNS Vulnerability: Security Bypass in Response-IP Handling N/A unrated No fix published 22 Jul 2026
Unbound DNSCrypt Configuration Vulnerability - CVE-2026-55990 N/A unrated No fix published 22 Jul 2026
Denial of Service Vulnerability in Unbound DNS Resolver due to DNSCrypt Query Handling N/A unrated No fix published 22 Jul 2026
Denial of Service Vulnerability in Unbound DNS-over-QUIC Implementation N/A unrated No fix published 22 Jul 2026
Critical Vulnerability in Unbound Package: Cookie Validation Flaw via Proxy Protocol N/A unrated No fix published 22 Jul 2026
Critical Vulnerability in Unbound DNS Resolver: Cache Short-Circuiting via Glue Records N/A unrated No fix published 22 Jul 2026
Unbound DNSSEC Amplification Vulnerability - CVE-2026-50045 N/A unrated No fix published 22 Jul 2026
Critical Stack Overflow Vulnerability in Unbound DNS Resolver N/A unrated No fix published 22 Jul 2026
Critical Assertion Failure in Unbound Package Due to DNS-over-QUIC Misconfiguration N/A unrated No fix published 22 Jul 2026
Memory Corruption Vulnerability in Unbound DNS Resolver N/A unrated No fix published 22 Jul 2026
Critical Vulnerability in Unbound Package: Potential Zone Transfer Exploit N/A unrated No fix published 22 Jul 2026
Denial of Service Vulnerability in Unbound DNS Package N/A unrated No fix published 22 Jul 2026
Denial of Service Vulnerability in Unbound DNS-over-QUIC N/A unrated No fix published 22 Jul 2026
DNS Cache Poisoning Vulnerability in Unbound Package N/A unrated No fix published 22 Jul 2026
Critical Vulnerability in Unbound Package: Local Zone Bypass Issue N/A unrated No fix published 22 Jul 2026
Ghost Domain Vulnerability in Unbound Package: CVE-2026-42955 N/A unrated No fix published 22 Jul 2026
Critical Vulnerability in Unbound Package: DNSSEC Bypass Due to Off-by-One Error N/A unrated No fix published 22 Jul 2026
DNSSEC Vulnerability in Unbound: Wildcard RRset Replay Attack N/A unrated No fix published 22 Jul 2026
Critical Termination Vulnerability in Unbound Package - CVE-2026-44621 N/A unrated No fix published 22 Jul 2026
Critical Vulnerability in Unbound Package: CVE-2026-42960 Exposes Security Risks N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-42923 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-44608 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-32792 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-42944 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-42959 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-33278 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-42534 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-41292 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-40622 N/A unrated No fix published 20 May 2026
Critical Vulnerability in Unbound Package: CVE-2026-44390 N/A unrated No fix published 20 May 2026
Critical Security Update for Unbound: CVE-2025-11411 N/A unrated 1.13.1-1+deb11u7 30 Nov 2025
Critical Security Update for Unbound: CVE-2025-11411 N/A unrated 1.13.1-1+deb11u6 05 Nov 2025
Critical Vulnerability in Unbound Package: CVE-2025-11411 N/A unrated No fix published 22 Oct 2025
Critical Security Update for Unbound: Addressing CVE-2024-33655 and CVE-2025-5994 N/A unrated 1.13.1-1+deb11u5 24 Aug 2025
Rebirthday Attack Vulnerability in Unbound Package N/A unrated 1.13.1-1+deb11u5 16 Jul 2025
Critical Security Update for Unbound: Addressing CVE-2024-8508 N/A unrated 1.13.1-1+deb11u4 14 Nov 2024
Denial of Service Vulnerability in Unbound DNS Resolver N/A unrated 1.13.1-1+deb11u4 03 Oct 2024
Critical Security Update for Unbound: Addressing Vulnerabilities CVE-2024-43167 and CVE-2024-43168 N/A unrated 1.13.1-1+deb11u3 29 Sep 2024
Heap Buffer Overflow in Unbound Package Could Lead to Memory Corruption N/A unrated 1.13.1-1+deb11u3 12 Aug 2024
Heap Buffer Overflow Vulnerability in Unbound Package N/A unrated 1.13.1-1+deb11u3 12 Aug 2024
NULL Pointer Dereference Vulnerability in Unbound Package N/A unrated 1.13.1-1+deb11u3 12 Aug 2024
NULL Pointer Dereference Vulnerability in Unbound Package N/A unrated 1.13.1-1+deb11u3 12 Aug 2024
DNSBomb Vulnerability in Unbound: Denial of Service Risk N/A unrated 1.13.1-1+deb11u5 06 Jun 2024
DSA-5620-1: Unbound Security Update N/A unrated 1.13.1-1+deb11u2 14 Feb 2024
Non-Responsive Delegation Attack in Unbound: A Denial of Service Vulnerability N/A unrated 1.13.1-1+deb11u1 26 Sep 2022
Ghost Domain Names Attack Vulnerability in Unbound Package N/A unrated 1.13.1-1+deb11u1 01 Aug 2022
Ghost Domain Names Attack Vulnerability in Unbound Package N/A unrated 1.13.1-1+deb11u1 01 Aug 2022

Looking for another version, or everything Vulert holds for unbound?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About unbound 1.13.1-1

Is unbound 1.13.1-1 vulnerable?

Yes. 52 vulnerabilities in the Vulert database cover unbound 1.13.1-1: 0 critical, 0 high, 0 medium and 0 low, plus 52 not yet rated. Each entry above names the fixed version to move to.

How do I monitor unbound for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the unbound version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.