Red Hat Security Advisory

RHSA-2025:0837

unbound security update

Released 2025-01-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python3-unbound-1.16.2-5.8.el8_10, unbound-1.16.2-5.8.el8_10, unbound-devel-1.16.2-5.8.el8_10 +1

Fixes 2 records

TI-2024-01390 CVE-2024-1488 · GHSA-35qh-7f6c-rjf7

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

LOW 35

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.00321 Published 2024-02-15 Partial fix · 1.16.2-5.el8_9.6, 1.16.2-5.8.el8_10 +7 CWE-276

TI-2024-07887 CVE-2024-8508 · GHSA-g7cv-x9wx-38gx

Unbounded name compression could lead to Denial of Service

LOW 31

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00801 Published 2024-10-03 Partial fix CWE-606