Skip to content
OpenAdvisories
Medium ELSA-2023-2771 1 CVE

Moderate: unbound security and bug fix update (Oracle Linux 8)

Published May 24, 2023 · Updated May 24, 2023

Summary

[1.16.2-5]
- Stop creating wrong devel manual pages (#2135322)

[1.16.2-4]
- Apply correctly previous change (CVE-2022-3204)

[1.16.2-3]
- Fix NRDelegation attack leading to uncontrolled resource consumption
(CVE-2022-3204)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 python3-unbound 0:1.16.2-5.el8
Oracle Linux · 8 unbound 0:1.16.2-5.el8
Oracle Linux · 8 unbound-devel 0:1.16.2-5.el8
Oracle Linux · 8 unbound-libs 0:1.16.2-5.el8

Vulnerabilities 1

  • High 7.5

    NRDelegation Attack

    A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The …