Summary
[1.7.3-11]
- Fix amplifying an incoming query into a large number of queries directed to a target
- Resolves: rhbz#1839177 (CVE-2020-12662), rhbz#1840262 (CVE-2020-12663)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-unbound | 0:1.7.3-11.el8_2 |
| Oracle Linux · 8 | unbound | 0:1.7.3-11.el8_2 |
| Oracle Linux · 8 | unbound-devel | 0:1.7.3-11.el8_2 |
| Oracle Linux · 8 | unbound-libs | 0:1.7.3-11.el8_2 |
Vulnerabilities 2
-
Unscored —
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered …
-
Unscored —
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.