Skip to content
OpenAdvisories
Medium ELSA-2023-2370 1 CVE

Moderate: unbound security update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Ecosystem: Oracle Linux

Summary

[1.16.2-3]
- Fix NRDelegation attack leading to uncontrolled resource consumption
(CVE-2022-3204)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 9 python3-unbound 0:1.16.2-3.el9
Oracle Linux · 9 unbound 0:1.16.2-3.el9
Oracle Linux · 9 unbound-devel 0:1.16.2-3.el9
Oracle Linux · 9 unbound-libs 0:1.16.2-3.el9

Vulnerabilities 1

  • High 7.5
    CVE-2022-3204

    NRDelegation Attack

    A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine