Red Hat Security Advisory

RHSA-2025:8047

unbound security update

Released 2025-05-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) python3-unbound-1.20.0-10.el10_0, unbound-1.20.0-10.el10_0, unbound-anchor-1.20.0-10.el10_0 +2
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) unbound-devel-1.20.0-10.el10_0

Fixes 1 record

TI-2024-07887 CVE-2024-8508 · GHSA-g7cv-x9wx-38gx

Unbounded name compression could lead to Denial of Service

LOW 31

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00801 Published 2024-10-03 Partial fix CWE-606