Summary
[1.16.2-8.1]
- Fix unbounded name compression could lead to Denial of Service (CVE-2024-8508)
[1.16.2-8]
- Ensure group access correction reaches also updated configs (CVE-2024-1488)
[1.16.2-7]
- Ensure only unbound group can change configuration (CVE-2024-1488)
[1.16.2-6]
- Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
- Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
- Resolves: RHEL-25671
- Resolves: RHEL-25643
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3-unbound | 0:1.16.2-8.el9_5.1 |
| Oracle Linux · 9 | unbound | 0:1.16.2-8.el9_5.1 |
| Oracle Linux · 9 | unbound-devel | 0:1.16.2-8.el9_5.1 |
| Oracle Linux · 9 | unbound-libs | 0:1.16.2-8.el9_5.1 |
Vulnerabilities 1
-
Medium 5.3
Unbounded name compression could lead to Denial of Service
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a consid…