Skip to content
OpenAdvisories
High USN-5732-1 1 CVE

unbound vulnerability

Published Nov 17, 2022 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Unbound incorrectly handled delegations with a large
number of non-responsive nameservers. A remote attacker could possibly use
this issue to cause Unbound to consume resources, leading to a denial of
service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS unbound 1.6.7-1ubuntu2.6
Ubuntu · 20.04 LTS 20.04:LTS unbound 1.9.4-2ubuntu1.4
Ubuntu · 22.04 LTS 22.04:LTS unbound 1.13.1-1ubuntu5.3

Vulnerabilities 1

  • High 7.5
    CVE-2022-3204

    NRDelegation Attack

    A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-3204