Red Hat Security Advisory

RHSA-2020:2419

unbound security update

Released 2020-06-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 8.1) python3-unbound-1.7.3-9.el8_1, unbound-1.7.3-9.el8_1, unbound-devel-1.7.3-9.el8_1 +1

TI-2020-10070 CVE-2020-12663 · GHSA-rhjg-fh2p-jpv5

LOW 39

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03588 Published 2020-05-19 Fixed CWE-835

TI-2020-10069 CVE-2020-12662 · GHSA-w2pr-2387-vxgh

LOW 39

Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03197 Published 2020-05-19 Fixed CWE-400