Summary
[1.6.6-4]
- Fix amplifying an incoming query into a large number of queries directed to a target
- Resolves: rhbz#1839172 (CVE-2020-12662), rhbz#1840258 (CVE-2020-12663)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | unbound | 0:1.6.6-4.el7_8 |
| Oracle Linux · 7 | unbound-devel | 0:1.6.6-4.el7_8 |
| Oracle Linux · 7 | unbound-libs | 0:1.6.6-4.el7_8 |
| Oracle Linux · 7 | unbound-python | 0:1.6.6-4.el7_8 |
Vulnerabilities 2
-
Unscored —
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered …
-
Unscored —
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.