Red Hat Security Advisory

RHSA-2024:2045

unbound security update

Released 2024-04-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.6) python3-unbound-1.7.3-17.el8_6.5, unbound-1.7.3-17.el8_6.5, unbound-devel-1.7.3-17.el8_6.5 +1

TI-2022-02959 CVE-2022-3204 · GHSA-7mc5-x7xh-682h

MEDIUM 42

A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01647 Published 2022-09-26 Partial fix CWE-400

TI-2022-12835 CVE-2022-30699 · GHSA-fjfh-84xh-5hv3

LOW 31

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01155 Published 2022-08-01 Partial fix CWE-613

TI-2022-12834 CVE-2022-30698 · GHSA-297v-qp46-84h5

LOW 31

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01155 Published 2022-08-01 Partial fix CWE-613