Skip to content
OpenAdvisories
Medium USN-7855-1 1 CVE

unbound vulnerability

Published Nov 4, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Unbound
incorrectly handled certain promiscuous NS RRSets. A remote attacker could
possibly use this issue to perform a domain hijack attack.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS unbound 1.13.1-1ubuntu5.13
Ubuntu · 24.04 LTS 24.04:LTS unbound 1.19.2-1ubuntu3.6
Ubuntu · 25.10 unbound 1.22.0-2ubuntu2.1

Vulnerabilities 1

  • Medium 5.7
    CVE-2025-11411

    Possible domain hijacking via promiscuous records in the authority section

    NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information fo…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2025-11411