Summary
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.
Security Fix(es):
* unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | python3-unbound | 1.16.2-8.el9_5.1 |
| AlmaLinux · 9 | unbound | 1.16.2-8.el9_5.1 |
| AlmaLinux · 9 | unbound-devel | 1.16.2-8.el9_5.1 |
| AlmaLinux · 9 | unbound-libs | 1.16.2-8.el9_5.1 |
Vulnerabilities 1
-
Medium 5.3
Unbounded name compression could lead to Denial of Service
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a consid…