Red Hat Security AdvisoryRHSA-2026:18556
unbound security update
Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) python3-unbound-1.24.2-7.el10, unbound-1.24.2-7.el10, unbound-anchor-1.24.2-7.el10 +3
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) unbound-devel-1.24.2-7.el10
Fixes 2 records
Priority HIGH 72
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pul…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01743 · Published 2024-06-06 · Partial fix CWE-400
Priority LOW 26
NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks.
CVSS 4.0MEDIUM 5.7· Adjacent network · No auth · No interaction · EPSS 0.0033 · Published 2025-10-22 · Partial fix CWE-349
