Skip to content
OpenAdvisories
High RHSA-2024:2045 3 CVEs

Red Hat Security Advisory: unbound security update

Published Sep 16, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream python3-unbound 0:1.7.3-17.el8_6.5
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream python3-unbound-debuginfo 0:1.7.3-17.el8_6.5
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream unbound 0:1.7.3-17.el8_6.5
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream unbound-debuginfo 0:1.7.3-17.el8_6.5
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream unbound-debugsource 0:1.7.3-17.el8_6.5
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream unbound-devel 0:1.7.3-17.el8_6.5
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream unbound-libs 0:1.7.3-17.el8_6.5
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream unbound-libs-debuginfo 0:1.7.3-17.el8_6.5

Vulnerabilities 3

  • High 7.5
    CVE-2022-3204

    NRDelegation Attack

    A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-30698

    Novel "ghost domain names" attack by introducing subdomain delegations

    NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-30699

    Novel "ghost domain names" attack by updating almost expired delegation information

    NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116729
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128947
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2045.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-3204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3204
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3204
  • article
    https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
  • report
    https://access.redhat.com/security/cve/CVE-2022-30698
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-30698
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-30698
  • report
    https://access.redhat.com/security/cve/CVE-2022-30699
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-30699
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-30699