CVE-2026-44390

A flaw was found in Unbound. A remote attacker can exploit this vulnerability by sending specially crafted DNS responses containing very large Resource Record Sets (RRsets) that require name compression. This can cause Unbound to spend a significant amount of time processing these responses, leading to degraded performance and potentially a denial of service (DoS) for legitimate users.

This is an Important denial of service vulnerability in Unbound. When configured as a recursive DNS resolver, Unbound can be subjected to excessive resource consumption by a remote attacker sending specially crafted DNS responses containing very large Resource Record Sets. This can lead to degraded performance and a denial of service for legitimate DNS queries, impacting services that rely on the resolver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.