Skip to content
OpenAdvisories
Medium DLA-3952-1 1 CVE

unbound - security update

Published Nov 14, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 unbound 1.13.1-1+deb11u4

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-8508

    Unbounded name compression could lead to Denial of Service

    NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a consid…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine