unbound security update

2024-02-2800:00:00

linux.oracle.com

unix

security update

dos

dnssec

cve-2023-50387

cve-2023-50868

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8 High

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

JSON

[1.16.2-3.1]

Fix DNSSEC validation vulnerabilities which can lead to DoS in trivially orchestrated attacks
(CVE-2023-50387 and CVE-2023-50868)

OSVersionArchitecturePackageVersionFilename
oracle linux9srcunbound< 1.16.2-3.el9_3.1unbound-1.16.2-3.el9_3.1.src.rpm
oracle linux9srcunbound< 1.16.2-3.el9_3.1unbound-1.16.2-3.el9_3.1.src.rpm
oracle linux9aarch64python3-unbound< 1.16.2-3.el9_3.1python3-unbound-1.16.2-3.el9_3.1.aarch64.rpm
oracle linux9aarch64unbound< 1.16.2-3.el9_3.1unbound-1.16.2-3.el9_3.1.aarch64.rpm
oracle linux9aarch64unbound-devel< 1.16.2-3.el9_3.1unbound-devel-1.16.2-3.el9_3.1.aarch64.rpm
oracle linux9aarch64unbound-libs< 1.16.2-3.el9_3.1unbound-libs-1.16.2-3.el9_3.1.aarch64.rpm
oracle linux9srcunbound< 1.16.2-3.el9_3.1unbound-1.16.2-3.el9_3.1.src.rpm
oracle linux9srcunbound< 1.16.2-3.el9_3.1unbound-1.16.2-3.el9_3.1.src.rpm
oracle linux9x86_64python3-unbound< 1.16.2-3.el9_3.1python3-unbound-1.16.2-3.el9_3.1.x86_64.rpm
oracle linux9x86_64unbound< 1.16.2-3.el9_3.1unbound-1.16.2-3.el9_3.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	unbound	< 1.16.2-3.el9_3.1	unbound-1.16.2-3.el9_3.1.src.rpm
oracle linux	9	src	unbound	< 1.16.2-3.el9_3.1	unbound-1.16.2-3.el9_3.1.src.rpm
oracle linux	9	aarch64	python3-unbound	< 1.16.2-3.el9_3.1	python3-unbound-1.16.2-3.el9_3.1.aarch64.rpm
oracle linux	9	aarch64	unbound	< 1.16.2-3.el9_3.1	unbound-1.16.2-3.el9_3.1.aarch64.rpm
oracle linux	9	aarch64	unbound-devel	< 1.16.2-3.el9_3.1	unbound-devel-1.16.2-3.el9_3.1.aarch64.rpm
oracle linux	9	aarch64	unbound-libs	< 1.16.2-3.el9_3.1	unbound-libs-1.16.2-3.el9_3.1.aarch64.rpm
oracle linux	9	src	unbound	< 1.16.2-3.el9_3.1	unbound-1.16.2-3.el9_3.1.src.rpm
oracle linux	9	src	unbound	< 1.16.2-3.el9_3.1	unbound-1.16.2-3.el9_3.1.src.rpm
oracle linux	9	x86_64	python3-unbound	< 1.16.2-3.el9_3.1	python3-unbound-1.16.2-3.el9_3.1.x86_64.rpm
oracle linux	9	x86_64	unbound	< 1.16.2-3.el9_3.1	unbound-1.16.2-3.el9_3.1.x86_64.rpm