https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:54:29 +0000 https://vulnerability.circl.lu/vuln/cve-2025-5994 <p><strong>Affected:</strong> NLnet Labs Unbound</p> <p>A multi-vendor cache poisoning vulnerability named &#39;Rebirthday Attack&#39; has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., &#39;--enable-subnet&#39;, AND configured to send ECS information along with queries to upstream name servers, i.e., at least one of the &#39;send-client-subnet&#39;, &#39;client-subnet-zone&#39; or &#39;client-subnet-always-forward&#39; options is used. Resolvers supporting ECS need to segregate outgoing queries to accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous replies.</p> <p><strong>Affected:</strong> NLnet Labs Unbound</p> <p>A multi-vendor cache poisoning vulnerability named &#39;Rebirthday Attack&#39; has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., &#39;--enable-subnet&#39;, AND configured to send ECS information along with queries to upstream name servers, i.e., at least one of the &#39;send-client-subnet&#39;, &#39;client-subnet-zone&#39; or &#39;client-subnet-always-forward&#39; options is used. Resolvers supporting ECS need to segregate outgoing queries to accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous replies.</p> https://vulnerability.circl.lu/vuln/cve-2025-5994