Lucene search
AlmaLinuxALSA-2024:0965HistoryFeb 26, 2024 - 12:00 a.m.
Important: unbound security update
2024-02-2600:00:00
errata.almalinux.org
19
unbound
security update
bind9
cpu consumption
dns
dnssec
resolver
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.
Security Fix(es):
- bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
- bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | i686 | unbound-devel | < 1.16.2-5.el8_9.2 | unbound-devel-1.16.2-5.el8_9.2.i686.rpm |
| almalinux | 8 | i686 | unbound-libs | < 1.16.2-5.el8_9.2 | unbound-libs-1.16.2-5.el8_9.2.i686.rpm |
| almalinux | 8 | aarch64 | unbound-devel | < 1.16.2-5.el8_9.2 | unbound-devel-1.16.2-5.el8_9.2.aarch64.rpm |
| almalinux | 8 | aarch64 | unbound | < 1.16.2-5.el8_9.2 | unbound-1.16.2-5.el8_9.2.aarch64.rpm |
| almalinux | 8 | aarch64 | unbound-libs | < 1.16.2-5.el8_9.2 | unbound-libs-1.16.2-5.el8_9.2.aarch64.rpm |
| almalinux | 8 | aarch64 | python3-unbound | < 1.16.2-5.el8_9.2 | python3-unbound-1.16.2-5.el8_9.2.aarch64.rpm |
| almalinux | 8 | x86_64 | python3-unbound | < 1.16.2-5.el8_9.2 | python3-unbound-1.16.2-5.el8_9.2.x86_64.rpm |
| almalinux | 8 | x86_64 | unbound-devel | < 1.16.2-5.el8_9.2 | unbound-devel-1.16.2-5.el8_9.2.x86_64.rpm |
| almalinux | 8 | x86_64 | unbound-libs | < 1.16.2-5.el8_9.2 | unbound-libs-1.16.2-5.el8_9.2.x86_64.rpm |
| almalinux | 8 | x86_64 | unbound | < 1.16.2-5.el8_9.2 | unbound-1.16.2-5.el8_9.2.x86_64.rpm |
Related
nessus
nessus
CentOS 8 : unbound (CESA-2024:0965)
2024-02-25 00:00:00
Slackware Linux 15.0 / current dnsmasq Multiple Vulnerabilities (SSA:2024-044-02)
2024-02-14 00:00:00
RHEL 8 : dnsmasq (RHSA-2024:1335)
2024-03-14 00:00:00
openvas
openvas
Fedora: Security Advisory for unbound (FEDORA-2024-2e26eccfcb)
2024-02-18 00:00:00
Fedora: Security Advisory for dnsmasq (FEDORA-2024-e24211eff0)
2024-02-20 00:00:00
Fedora: Security Advisory for dnsmasq (FEDORA-2024-e00eceb11c)
2024-02-29 00:00:00
oraclelinux
oraclelinux
unbound security update
2024-02-28 00:00:00
dnsmasq security update
2024-03-15 00:00:00
unbound security update
2024-02-28 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: pdns-recursor-4.8.6-1.fc38
2024-02-23 01:32:18
[SECURITY] Fedora 39 Update: unbound-1.19.1-2.fc39
2024-02-18 00:55:50
[SECURITY] Fedora 39 Update: dnsmasq-2.90-1.fc39
2024-02-19 02:29:29
redhat
redhat
(RHSA-2024:0965) Important: unbound security update
2024-02-26 00:56:26
(RHSA-2024:1522) Important: dnsmasq security update
2024-03-26 12:26:32
(RHSA-2024:0981) Important: unbound security update
2024-02-26 09:13:42
debian
debian
[SECURITY] [DLA 3816-1] bind9 security update
2024-05-17 18:05:06
[SECURITY] [DSA 5626-1] pdns-recursor security update
2024-02-18 16:35:24
[SECURITY] [DLA 3736-1] unbound security update
2024-02-21 12:20:40
ubuntu
ubuntu
Unbound vulnerabilities
2024-02-28 00:00:00
Bind vulnerabilities
2024-04-09 00:00:00
Dnsmasq vulnerabilities
2024-04-24 00:00:00
cloudlinux
cloudlinux
bind: Fix of 2 CVEs
2024-03-14 17:26:05
osv
osv
Important: dnsmasq security update
2024-03-14 00:00:00
bind9 - security update
2024-05-17 00:00:00
Important: unbound security update
2024-02-26 00:00:00
amazon
amazon
Important: unbound
2024-02-29 10:03:00
Important: bind
2024-04-24 22:15:00
almalinux
almalinux
Important: dnsmasq security update
2024-03-14 00:00:00
Important: unbound security update
2024-02-26 00:00:00
Important: dnsmasq security update
2024-03-14 00:00:00
freebsd
freebsd
powerdns-recursor -- Multiple Vulnerabilities
2024-02-14 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-24:03.unbound
2024-03-28 00:00:00
mageia
mageia
Updated dnsmasq packages fix security vulnerabilities
2024-02-18 04:49:05
Updated unbound packages fix security vulnerabilities
2024-02-17 03:55:07
akamaiblog
akamaiblog
rocky
rocky
dnsmasq security update
2024-03-27 04:34:32
bind and dhcp security update
2024-05-06 13:04:07
bind and dhcp security update
2024-06-14 13:59:16
redos
redos
ROS-20240410-09
2024-04-10 00:00:00
slackware
slackware
[slackware-security] dnsmasq
2024-02-14 04:22:19
cloudfoundry
cloudfoundry
USN-6665-1: Unbound vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0731
2024-02-28 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0205
2024-02-14 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0726
2024-02-14 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.05 Low
EPSS
Percentile
92.9%
Related for ALSA-2024:0965