Red Hat Security AdvisoryRHSA-2015:2455
unbound security and bug fix update
Released 2015-11-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) unbound-1.4.20-26.el7, unbound-libs-1.4.20-26.el7
- Red Hat Enterprise Linux Client Optional (v. 7) unbound-devel-1.4.20-26.el7, unbound-python-1.4.20-26.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) unbound-1.4.20-26.el7, unbound-libs-1.4.20-26.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) unbound-1.4.20-26.el7, unbound-devel-1.4.20-26.el7, unbound-python-1.4.20-26.el7
- Red Hat Enterprise Linux Server (v. 7) unbound-1.4.20-26.el7, unbound-libs-1.4.20-26.el7, unbound-libs-1.4.20-26.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) unbound-devel-1.4.20-26.el7, unbound-devel-1.4.20-26.el7.ppc, unbound-python-1.4.20-26.el7
- Red Hat Enterprise Linux Workstation (v. 7) unbound-1.4.20-26.el7, unbound-libs-1.4.20-26.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) unbound-devel-1.4.20-26.el7, unbound-python-1.4.20-26.el7
Fixes 1 record
Priority MEDIUM 44
iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.32163 · Published 2014-12-11 · Fixed CWE-399
