Lucene search
AlmaLinuxALSA-2023:2771HistoryMay 16, 2023 - 12:00 a.m.
Moderate: unbound security and bug fix update
2023-05-1600:00:00
errata.almalinux.org
28
unbound
security
bug fix
dns resolver
cve
resource consumption
almalinux
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.004
Percentile
73.5%
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.
Security Fix(es):
- unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack) (CVE-2022-3204)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | i686 | unbound-devel | < 1.16.2-5.el8 | unbound-devel-1.16.2-5.el8.i686.rpm |
| almalinux | 8 | i686 | unbound-libs | < 1.16.2-5.el8 | unbound-libs-1.16.2-5.el8.i686.rpm |
| almalinux | 8 | aarch64 | unbound-libs | < 1.16.2-5.el8 | unbound-libs-1.16.2-5.el8.aarch64.rpm |
| almalinux | 8 | aarch64 | python3-unbound | < 1.16.2-5.el8 | python3-unbound-1.16.2-5.el8.aarch64.rpm |
| almalinux | 8 | aarch64 | unbound | < 1.16.2-5.el8 | unbound-1.16.2-5.el8.aarch64.rpm |
| almalinux | 8 | aarch64 | unbound-devel | < 1.16.2-5.el8 | unbound-devel-1.16.2-5.el8.aarch64.rpm |
| almalinux | 8 | x86_64 | unbound-libs | < 1.16.2-5.el8 | unbound-libs-1.16.2-5.el8.x86_64.rpm |
| almalinux | 8 | x86_64 | unbound-devel | < 1.16.2-5.el8 | unbound-devel-1.16.2-5.el8.x86_64.rpm |
| almalinux | 8 | x86_64 | python3-unbound | < 1.16.2-5.el8 | python3-unbound-1.16.2-5.el8.x86_64.rpm |
| almalinux | 8 | x86_64 | unbound | < 1.16.2-5.el8 | unbound-1.16.2-5.el8.x86_64.rpm |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2023-2417)
2023-07-25 00:00:00
Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2022-2808)
2022-12-09 00:00:00
Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2023-1156)
2023-01-12 00:00:00
oraclelinux
oraclelinux
unbound security update
2023-05-15 00:00:00
unbound security and bug fix update
2023-05-24 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: unbound (CVE-2022-3204)
2023-03-28 00:00:00
Oracle Linux 8 : unbound (ELSA-2023-2771)
2023-05-24 00:00:00
CentOS 8 : unbound (CESA-2023:2771)
2023-05-16 00:00:00
nvd
nvd
CVE-2022-3204
2022-09-26 14:15:11
cvelist
cvelist
CVE-2022-3204 NRDelegation Attack
2022-09-26 13:41:46
redhat
redhat
(RHSA-2023:2771) Moderate: unbound security and bug fix update
2023-05-16 05:54:06
(RHSA-2023:2370) Moderate: unbound security update
2023-05-09 05:08:45
(RHSA-2024:2045) Moderate: unbound security update
2024-04-25 06:32:05
ubuntucve
ubuntucve
CVE-2022-3204
2022-09-26 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-3204 affecting package unbound for versions less than 1.16.3-1
2022-11-03 20:37:45
CVE-2022-3204 affecting package unbound 1.10.0-4
2022-12-27 17:55:47
fedora
fedora
[SECURITY] Fedora 37 Update: unbound-1.16.3-1.fc37
2022-09-27 00:17:22
[SECURITY] Fedora 35 Update: unbound-1.16.3-1.fc35
2022-10-08 17:47:30
[SECURITY] Fedora 36 Update: unbound-1.16.3-1.fc36
2022-10-07 15:55:53
mageia
mageia
Updated unbound packages fix security vulnerability
2022-10-08 23:22:22
osv
osv
Moderate: unbound security and bug fix update
2023-05-16 00:00:00
CVE-2022-3204
2022-09-26 14:15:11
libunbound8-1.16.3-1.1 on GA media
2024-06-15 00:00:00
amazon
amazon
Medium: unbound
2024-02-15 03:52:00
freebsd
freebsd
unbound -- Non-Responsive Delegation Attack
2022-09-26 00:00:00
veracode
veracode
Non-Responsive Delegation Attack' (NRDelegation Attack)
2022-09-24 18:04:26
prion
prion
Hardcoded credentials
2022-09-26 14:15:00
cloudfoundry
cloudfoundry
USN-5732-1: Unbound vulnerability | Cloud Foundry
2022-12-07 00:00:00
redhatcve
redhatcve
CVE-2022-3204
2022-09-22 04:48:48
cve
cve
CVE-2022-3204
2022-09-26 14:15:11
alpinelinux
alpinelinux
CVE-2022-3204
2022-09-26 14:15:11
debiancve
debiancve
CVE-2022-3204
2022-09-26 14:15:11
photon
photon
Important Photon OS Security Update - PHSA-2022-0257
2022-10-03 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0462
2022-10-04 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0257
2022-10-03 00:00:00
ubuntu
ubuntu
Unbound vulnerability
2022-11-17 00:00:00
almalinux
almalinux
Moderate: unbound security update
2023-05-09 00:00:00
gentoo
gentoo
Unbound: Multiple Vulnerabilities
2022-12-19 00:00:00
debian
debian
[SECURITY] [DLA 3371-1] unbound security update
2023-03-29 12:52:49
ics
ics
Hitachi Energy AFF66x
2023-08-22 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.004
Percentile
73.5%
Related for ALSA-2023:2771