Skip to content
OpenAdvisories
Unscored RHSA-2022:7622 3 CVEs

Red Hat Security Advisory: unbound security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-unbound 0:1.16.2-2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-unbound-debuginfo 0:1.16.2-2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream unbound 0:1.16.2-2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream unbound-debuginfo 0:1.16.2-2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream unbound-debugsource 0:1.16.2-2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream unbound-devel 0:1.16.2-2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream unbound-libs 0:1.16.2-2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream unbound-libs-debuginfo 0:1.16.2-2.el8

Vulnerabilities 3

  • Unscored —
    CVE-2019-25033

    Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor disp…

    unbound unbound Debian Ubuntu
  • Unscored —
    CVE-2022-30698

    Novel "ghost domain names" attack by introducing subdomain delegations

    NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-30699

    Novel "ghost domain names" attack by updating almost expired delegation information

    NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1959468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2018806
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2023549
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2027735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2038251
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081958
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116729
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7622.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-25033
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1954775
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-25033
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-25033
  • report
    https://access.redhat.com/security/cve/CVE-2022-30698
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-30698
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-30698
  • report
    https://access.redhat.com/security/cve/CVE-2022-30699
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-30699
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-30699