Red Hat Security Advisory

RHSA-2022:7622

unbound security, bug fix, and enhancement update

Released 2022-11-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python3-unbound-1.16.2-2.el8, unbound-1.16.2-2.el8, unbound-devel-1.16.2-2.el8 +1

TI-2019-15173 CVE-2019-25033 · GHSA-xh42-fcvq-34r9

MEDIUM 47

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02368 Published 2021-04-27 Partial fix CWE-190

TI-2022-12835 CVE-2022-30699 · GHSA-fjfh-84xh-5hv3

LOW 31

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01155 Published 2022-08-01 Partial fix CWE-613

TI-2022-12834 CVE-2022-30698 · GHSA-297v-qp46-84h5

LOW 31

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01155 Published 2022-08-01 Partial fix CWE-613