Summary
[1.16.2-18]
- Prevent unbounded name compression (CVE-2024-8508)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3-unbound | 0:1.16.2-18.el9_6 |
| Oracle Linux · 9 | unbound | 0:1.16.2-18.el9_6 |
| Oracle Linux · 9 | unbound-devel | 0:1.16.2-18.el9_6 |
| Oracle Linux · 9 | unbound-dracut | 0:1.16.2-18.el9_6 |
| Oracle Linux · 9 | unbound-libs | 0:1.16.2-18.el9_6 |
Vulnerabilities 1
-
Medium 5.3
Unbounded name compression could lead to Denial of Service
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a consid…