Skip to content
OpenAdvisories
Medium USN-7080-1 1 CVE

unbound vulnerability

Published Oct 22, 2024 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

Toshifumi Sakaguchi discovered that Unbound incorrectly handled name
compression for large RRsets, which could lead to excessive CPU usage.
An attacker could potentially use this issue to cause a denial of service
by sending specially crafted DNS responses.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS unbound 1.9.4-2ubuntu1.9
Ubuntu · 22.04 LTS 22.04:LTS unbound 1.13.1-1ubuntu5.8
Ubuntu · 24.04 LTS 24.04:LTS unbound 1.19.2-1ubuntu3.3
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS unbound 1.4.22-1ubuntu4.14.04.3+esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS unbound 1.5.8-1ubuntu1.1+esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS unbound 1.6.7-1ubuntu2.6+esm3

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-8508

    Unbounded name compression could lead to Denial of Service

    NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a consid…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2024-8508