Red Hat Security AdvisoryRHSA-2020:4181
unbound security update
Released 2020-10-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) unbound-1.6.6-2.el7_7, unbound-libs-1.6.6-2.el7_7
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) unbound-1.6.6-2.el7_7, unbound-devel-1.6.6-2.el7_7, unbound-python-1.6.6-2.el7_7
- Red Hat Enterprise Linux Server EUS (v. 7.7) unbound-1.6.6-2.el7_7, unbound-libs-1.6.6-2.el7_7, unbound-libs-1.6.6-2.el7_7.ppc
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) unbound-devel-1.6.6-2.el7_7, unbound-devel-1.6.6-2.el7_7.ppc, unbound-python-1.6.6-2.el7_7
Fixes 2 records
Priority LOW 39
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03588 · Published 2020-05-19 · Fixed CWE-835
Priority LOW 39
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03197 · Published 2020-05-19 · Fixed CWE-400
