unbound security update

2024-02-2800:00:00

linux.oracle.com

bind9

cpu consumption

dnssec validator

cpu resource exhaustion

cve-2023-50387

cve-2023-50868

unix

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%

JSON

[1.16.2-5.2]

bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator
(CVE-2023-50387)
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
(CVE-2023-50868)

OSVersionArchitecturePackageVersionFilename
oracle linux8srcunbound< 1.16.2-5.el8_9.2unbound-1.16.2-5.el8_9.2.src.rpm
oracle linux8aarch64python3-unbound< 1.16.2-5.el8_9.2python3-unbound-1.16.2-5.el8_9.2.aarch64.rpm
oracle linux8aarch64unbound< 1.16.2-5.el8_9.2unbound-1.16.2-5.el8_9.2.aarch64.rpm
oracle linux8aarch64unbound-devel< 1.16.2-5.el8_9.2unbound-devel-1.16.2-5.el8_9.2.aarch64.rpm
oracle linux8aarch64unbound-libs< 1.16.2-5.el8_9.2unbound-libs-1.16.2-5.el8_9.2.aarch64.rpm
oracle linux8srcunbound< 1.16.2-5.el8_9.2unbound-1.16.2-5.el8_9.2.src.rpm
oracle linux8x86_64python3-unbound< 1.16.2-5.el8_9.2python3-unbound-1.16.2-5.el8_9.2.x86_64.rpm
oracle linux8x86_64unbound< 1.16.2-5.el8_9.2unbound-1.16.2-5.el8_9.2.x86_64.rpm
oracle linux8i686unbound-devel< 1.16.2-5.el8_9.2unbound-devel-1.16.2-5.el8_9.2.i686.rpm
oracle linux8x86_64unbound-devel< 1.16.2-5.el8_9.2unbound-devel-1.16.2-5.el8_9.2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	unbound	< 1.16.2-5.el8_9.2	unbound-1.16.2-5.el8_9.2.src.rpm
oracle linux	8	aarch64	python3-unbound	< 1.16.2-5.el8_9.2	python3-unbound-1.16.2-5.el8_9.2.aarch64.rpm
oracle linux	8	aarch64	unbound	< 1.16.2-5.el8_9.2	unbound-1.16.2-5.el8_9.2.aarch64.rpm
oracle linux	8	aarch64	unbound-devel	< 1.16.2-5.el8_9.2	unbound-devel-1.16.2-5.el8_9.2.aarch64.rpm
oracle linux	8	aarch64	unbound-libs	< 1.16.2-5.el8_9.2	unbound-libs-1.16.2-5.el8_9.2.aarch64.rpm
oracle linux	8	src	unbound	< 1.16.2-5.el8_9.2	unbound-1.16.2-5.el8_9.2.src.rpm
oracle linux	8	x86_64	python3-unbound	< 1.16.2-5.el8_9.2	python3-unbound-1.16.2-5.el8_9.2.x86_64.rpm
oracle linux	8	x86_64	unbound	< 1.16.2-5.el8_9.2	unbound-1.16.2-5.el8_9.2.x86_64.rpm
oracle linux	8	i686	unbound-devel	< 1.16.2-5.el8_9.2	unbound-devel-1.16.2-5.el8_9.2.i686.rpm
oracle linux	8	x86_64	unbound-devel	< 1.16.2-5.el8_9.2	unbound-devel-1.16.2-5.el8_9.2.x86_64.rpm