Skip to content
OpenAdvisories
High ALAS2-2020-1430 2 CVEs

Important: unbound security update (Amazon Linux 2)

Published May 19, 2020 · Updated May 20, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-12663: No description is available for this CVE. 99999: CVE-2020-12663 unbound: infinite loop via malformed DNS answers received from upstream servers CVE-2020-12662: No description is available for this CVE. 99999: CVE-2020-12662 unbound: insufficient control of network message volume leads to DoS

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2 unbound 0:1.6.6-1.amzn2.0.3
Amazon Linux · 2 unbound-debuginfo 0:1.6.6-1.amzn2.0.3
Amazon Linux · 2 unbound-devel 0:1.6.6-1.amzn2.0.3
Amazon Linux · 2 unbound-libs 0:1.6.6-1.amzn2.0.3
Amazon Linux · 2 unbound-python 0:1.6.6-1.amzn2.0.3

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-12662.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-12663.html