Summary
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.
Security Fix(es):
* unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | python3-unbound | 1.20.0-10.el10_0 |
| AlmaLinux · 10 | unbound | 1.20.0-10.el10_0 |
| AlmaLinux · 10 | unbound-anchor | 1.20.0-10.el10_0 |
| AlmaLinux · 10 | unbound-devel | 1.20.0-10.el10_0 |
| AlmaLinux · 10 | unbound-dracut | 1.20.0-10.el10_0 |
| AlmaLinux · 10 | unbound-libs | 1.20.0-10.el10_0 |
Vulnerabilities 1
-
Medium 5.3
Unbounded name compression could lead to Denial of Service
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a consid…