Skip to content
OpenAdvisories
Unscored RHSA-2022:8062 2 CVEs

Red Hat Security Advisory: unbound security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-unbound 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-unbound-debuginfo 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-debuginfo 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-debugsource 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-libs 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream unbound-libs-debuginfo 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::crb python3-unbound-debuginfo 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::crb unbound-debuginfo 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::crb unbound-debugsource 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::crb unbound-devel 0:1.16.2-2.el9
Red Hat · RHEL 9 enterprise_linux:9::crb unbound-libs-debuginfo 0:1.16.2-2.el9

Vulnerabilities 2

  • Unscored —
    CVE-2022-30698

    Novel "ghost domain names" attack by introducing subdomain delegations

    NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-30699

    Novel "ghost domain names" attack by updating almost expired delegation information

    NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1981415
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2056116
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2071543
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2071943
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2079548
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2087120
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2094336
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116729
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116802
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8062.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-30698
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-30698
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-30698
  • report
    https://access.redhat.com/security/cve/CVE-2022-30699
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-30699
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-30699