Red Hat Security Advisory

RHSA-2025:8197

unbound security update

Released 2025-05-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python3-unbound-1.16.2-18.el9_6, unbound-1.16.2-18.el9_6, unbound-dracut-1.16.2-18.el9_6 +1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) unbound-devel-1.16.2-18.el9_6

Fixes 1 record

TI-2024-07887 CVE-2024-8508 · GHSA-g7cv-x9wx-38gx

Unbounded name compression could lead to Denial of Service

LOW 31

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00801 Published 2024-10-03 Partial fix CWE-606