Skip to content
OpenAdvisories
Medium DLA-4365-2 1 CVE

unbound - security update

Published Nov 30, 2025 · Updated Nov 30, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 unbound 1.13.1-1+deb11u7

Vulnerabilities 1

  • Medium 5.7
    CVE-2025-11411

    Possible domain hijacking via promiscuous records in the authority section

    NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information fo…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine