CVE-2026-52863— 内存损坏可导致崩溃及拒绝服务漏洞
可能的 ATT&CK 技术 1AI
T1499 · Endpoint Denial of Service影响版本矩阵 1
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| NLnet Labs | Unbound | 1.25.0< 1.25.2 | affected |
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-52863 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Memory corruption could lead to crash and denial of service
来源: CVE Program / CVE List V5
Vulnerability Description
In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that could lead to memory corruption if the owner of the original view name is jostled out when Unbound is under pressure. Unbound needs to be configured with one of 'respip'/'rpz' modules, together with a module that can attach subqueries (respip CNAME redirection, dns64, subnetcache) and a configured 'access-control-view' while Unbound is under pressure so that joslte logic kicks in and starts dropping slow queries. The subquery is getting a shallow copy of the view name and if the super query which owns the view name is jostled out, memory corruption can occur. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. Debug memory builds (e.g., ASAN) that catch the free terminate the server.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
释放后使用
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| NLnet Labs | Unbound | 1.25.0 ~ 1.25.2 | - |
二、漏洞 CVE-2026-52863 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-52863 的情报信息
请登录查看更多情报信息。
CVE-2026-52863 补丁与修复 (1)
同批安全公告 · NLnet Labs · 2026-07-22 · 共 24 条
| CVE-2026-55973 | 7.5 HIGH | DNS错误报告导致栈缓冲区溢出 |
| CVE-2026-32665 | 7.5 HIGH | DNS-over-QUIC拒绝服务漏洞因`quic-size`预算绕过 |
| CVE-2026-40691 | 7.5 HIGH | DNSCrypt over TCP 死亡数据包漏洞 |
| CVE-2026-44690 | 7.5 HIGH | 通过RRSIG.labels操控实现跨区通配符缓存投毒漏洞 |
| CVE-2026-50248 | 6.5 MEDIUM | Auth/RPZ区域XFR接受伪造的主机名 |
| CVE-2026-55717 | 5.9 MEDIUM | 'serve-expired-client-timeout'与'response-ip' CNAME重定向可导致崩溃 |
| CVE-2026-55991 | 5.9 MEDIUM | libngtcp2 远程 DoQ 流控制断言失败漏洞 |
| CVE-2026-50046 | 5.9 MEDIUM | Bind 9 DoT转发查询被挤压时的堆使用后释放漏洞 |
| CVE-2026-55990 | 5.9 MEDIUM | Unbound 1.10.1 DNSCrypt 配置不当导致拒绝服务漏洞 |
| CVE-2026-56444 | 5.9 MEDIUM | BIND9 解析服务降级漏洞 |
| CVE-2026-44621 | 5.9 MEDIUM | Libunbound 配置未请求回复阈值可能导致异常终止 |
| CVE-2026-14586 | 5.9 MEDIUM | libngtcp2高并发DNS-over-QUIC环境下断言失败漏洞 |
| CVE-2026-50251 | 5.3 MEDIUM | 攻击者提供'0.0.0.0'/'::'触发防御性全局缓存刷新漏洞 |
| CVE-2026-50045 | 5.3 MEDIUM | DNSSEC 验证重启导致 'max-global-quota' 重置漏洞 |
| CVE-2026-56416 | 4.8 MEDIUM | 域名验证器可能因处理RDATA导致堆缓冲区溢出漏洞 |
| CVE-2026-46582 | 3.7 LOW | DNS服务器通配符重放导致缓存投毒漏洞 |
| CVE-2026-44687 | 3.7 LOW | harder-below-nxdomain逻辑存在漏洞可导致NXDOMAIN被影子 |
| CVE-2026-41637 | 3.7 LOW | DNS-over-QUIC查询处理不当导致服务降级 |
| CVE-2026-54478 | 3.7 LOW | DNS Cookie 绕过结合代理协议使用 |
| CVE-2026-42955 | 3.7 LOW | BIND 9 域名解析TTL控制漏洞 |
显示前 20 条，共 24 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-52863
暂无评论