Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
NLnet Labs disclosed a critical heap overflow in the DNSSEC validator of every Unbound DNS resolver release before 1.26.1, which an attacker controlling a malicious zone can trigger to achieve remote code execution; version 1.26.1, released the same day,...