Summary
[1.16.2-5.8]
- Prevent unbounded name compression (CVE-2024-8508)
[1.16.2-5.7]
- Rebuild to propagate to CentOS Stream (RHEL-25500)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-unbound | 0:1.16.2-5.8.el8_10 |
| Oracle Linux · 8 | unbound | 0:1.16.2-5.8.el8_10 |
| Oracle Linux · 8 | unbound-devel | 0:1.16.2-5.8.el8_10 |
| Oracle Linux · 8 | unbound-libs | 0:1.16.2-5.8.el8_10 |
Vulnerabilities 2
-
High 8.0
Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbo…
-
Medium 5.3
Unbounded name compression could lead to Denial of Service
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a consid…