Summary
[1.20.0-10]
- Prevent unbounded name compression (CVE-2024-8508)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | python3-unbound | 0:1.20.0-10.el10_0 |
| Oracle Linux · 10 | unbound | 0:1.20.0-10.el10_0 |
| Oracle Linux · 10 | unbound-anchor | 0:1.20.0-10.el10_0 |
| Oracle Linux · 10 | unbound-devel | 0:1.20.0-10.el10_0 |
| Oracle Linux · 10 | unbound-dracut | 0:1.20.0-10.el10_0 |
| Oracle Linux · 10 | unbound-libs | 0:1.20.0-10.el10_0 |
Vulnerabilities 1
-
Medium 5.3
Unbounded name compression could lead to Denial of Service
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a consid…