Red Hat Security Advisory

RHSA-2020:2640

unbound security update

Released 2020-06-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) unbound-1.4.20-29.el6_10.1, unbound-libs-1.4.20-29.el6_10.1
Red Hat Enterprise Linux Desktop Optional (v. 6) unbound-1.4.20-29.el6_10.1, unbound-devel-1.4.20-29.el6_10.1, unbound-python-1.4.20-29.el6_10.1
Red Hat Enterprise Linux Server (v. 6) unbound-1.4.20-29.el6_10.1, unbound-libs-1.4.20-29.el6_10.1, unbound-libs-1.4.20-29.el6_10.1.ppc
Red Hat Enterprise Linux Server Optional (v. 6) unbound-devel-1.4.20-29.el6_10.1, unbound-devel-1.4.20-29.el6_10.1.ppc, unbound-python-1.4.20-29.el6_10.1 +1
Red Hat Enterprise Linux Workstation (v. 6) unbound-1.4.20-29.el6_10.1, unbound-libs-1.4.20-29.el6_10.1
Red Hat Enterprise Linux Workstation Optional (v. 6) unbound-devel-1.4.20-29.el6_10.1, unbound-python-1.4.20-29.el6_10.1

TI-2020-10070 CVE-2020-12663 · GHSA-rhjg-fh2p-jpv5

LOW 39

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03588 Published 2020-05-19 Fixed CWE-835

TI-2020-10069 CVE-2020-12662 · GHSA-w2pr-2387-vxgh

LOW 39

Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03197 Published 2020-05-19 Fixed CWE-400