Red Hat Security AdvisoryRHSA-2020:2414
unbound security update
Released 2020-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) unbound-1.6.6-4.el7_8, unbound-libs-1.6.6-4.el7_8
- Red Hat Enterprise Linux Client Optional (v. 7) unbound-devel-1.6.6-4.el7_8, unbound-python-1.6.6-4.el7_8
- Red Hat Enterprise Linux ComputeNode (v. 7) unbound-1.6.6-4.el7_8, unbound-libs-1.6.6-4.el7_8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) unbound-1.6.6-4.el7_8, unbound-devel-1.6.6-4.el7_8, unbound-python-1.6.6-4.el7_8
- Red Hat Enterprise Linux Server (v. 7) unbound-1.6.6-4.el7_8, unbound-libs-1.6.6-4.el7_8, unbound-libs-1.6.6-4.el7_8.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) unbound-devel-1.6.6-4.el7_8, unbound-devel-1.6.6-4.el7_8.ppc, unbound-python-1.6.6-4.el7_8
- Red Hat Enterprise Linux Workstation (v. 7) unbound-1.6.6-4.el7_8, unbound-libs-1.6.6-4.el7_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) unbound-devel-1.6.6-4.el7_8, unbound-python-1.6.6-4.el7_8
Fixes 2 records
Priority LOW 39
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03588 · Published 2020-05-19 · Fixed CWE-835
Priority LOW 39
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03197 · Published 2020-05-19 · Fixed CWE-400
