CVE-2026-32792

A flaw was found in Unbound. A remote attacker can exploit this vulnerability by sending a specially crafted DNSCrypt query. This malicious query, when processed, causes Unbound to read beyond its allocated memory, leading to a heap overflow. This can result in a denial of service (DoS) by crashing the Unbound service.

This Moderate impact denial of service vulnerability affects Unbound instances compiled with DNSCrypt support. A specially crafted DNSCrypt query could lead to a heap overflow and service crash. However, the likelihood of a crash is low due to reliance on specific memory layouts and subsequent packet checks that may prevent successful exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.