Skip to content
OpenAdvisories
Medium RLSA-2022:7622 2 CVEs

Moderate: unbound security, bug fix, and enhancement update

Published Nov 8, 2022 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

The following packages have been upgraded to a later upstream version: unbound (1.16.2). (BZ#2027735)

Security Fix(es):

* unbound: the novel ghost domain where malicious users to trigger continued resolvability of malicious domain names (CVE-2022-30698)

* unbound: novel ghost domain attack where malicious users to trigger continued resolvability of malicious domain names (CVE-2022-30699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 unbound 0:1.16.2-2.el8

Vulnerabilities 2

  • Unscored —
    CVE-2022-30698

    Novel "ghost domain names" attack by introducing subdomain delegations

    NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-30699

    Novel "ghost domain names" attack by updating almost expired delegation information

    NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1959468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2018806
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2023549
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2027735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2038251
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081958
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2116729