Unscored DLA-2556-1 3 CVEs

unbound1.9 - security update

Published Feb 12, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	unbound1.9	1.9.0-2+deb10u2~deb9u1

Vulnerabilities 3

Unscored —

CVE-2020-12662

Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered …

unbound unbound unbound unbound Debian Ubuntu Azure Linux Alpine

May 19, 2020
Unscored —

CVE-2020-12663

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

unbound unbound unbound unbound Debian Ubuntu Azure Linux Alpine

May 19, 2020
Unscored —

CVE-2020-28935

Local symlink attack in Unbound and NSD

NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not t…

NLnet Labs Unbound NSD unbound Debian Ubuntu Azure Linux Alpine

Dec 7, 2020