Red Hat Security Advisory

RHSA-2022:8062

unbound security, bug fix, and enhancement update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) unbound-devel-1.16.2-2.el9
Red Hat Enterprise Linux AppStream (v. 9) python3-unbound-1.16.2-2.el9, unbound-1.16.2-2.el9, unbound-libs-1.16.2-2.el9

TI-2022-12835 CVE-2022-30699 · GHSA-fjfh-84xh-5hv3

LOW 31

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01155 Published 2022-08-01 Partial fix CWE-613

TI-2022-12834 CVE-2022-30698 · GHSA-297v-qp46-84h5

LOW 31

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01155 Published 2022-08-01 Partial fix CWE-613