(RHSA-2024:0982) Important: unbound security update

2024-02-2609:15:03

access.redhat.com

rhsa-2024:0982

unbound

dns resolver

dnssec resolver

bind9

keytrap

cpu consumption

cve-2023-50387

nsec3 closest encloser proof

cpu exhaustion

cve-2023-50868

cvss score

0.05 Low

EPSS

Percentile

92.9%

JSON

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64python3-unbound-debuginfo< 1.16.2-5.el8_8.1python3-unbound-debuginfo-1.16.2-5.el8_8.1.x86_64.rpm
RedHat8s390xunbound-libs-debuginfo< 1.16.2-5.el8_8.1unbound-libs-debuginfo-1.16.2-5.el8_8.1.s390x.rpm
RedHat8s390xunbound-libs< 1.16.2-5.el8_8.1unbound-libs-1.16.2-5.el8_8.1.s390x.rpm
RedHat8x86_64unbound-debugsource< 1.16.2-5.el8_8.1unbound-debugsource-1.16.2-5.el8_8.1.x86_64.rpm
RedHat8s390xpython3-unbound< 1.16.2-5.el8_8.1python3-unbound-1.16.2-5.el8_8.1.s390x.rpm
RedHat8ppc64leunbound-libs< 1.16.2-5.el8_8.1unbound-libs-1.16.2-5.el8_8.1.ppc64le.rpm
RedHat8aarch64unbound-libs-debuginfo< 1.16.2-5.el8_8.1unbound-libs-debuginfo-1.16.2-5.el8_8.1.aarch64.rpm
RedHat8ppc64lepython3-unbound< 1.16.2-5.el8_8.1python3-unbound-1.16.2-5.el8_8.1.ppc64le.rpm
RedHat8i686python3-unbound-debuginfo< 1.16.2-5.el8_8.1python3-unbound-debuginfo-1.16.2-5.el8_8.1.i686.rpm
RedHat8x86_64python3-unbound< 1.16.2-5.el8_8.1python3-unbound-1.16.2-5.el8_8.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	x86_64	python3-unbound-debuginfo	< 1.16.2-5.el8_8.1	python3-unbound-debuginfo-1.16.2-5.el8_8.1.x86_64.rpm
RedHat	8	s390x	unbound-libs-debuginfo	< 1.16.2-5.el8_8.1	unbound-libs-debuginfo-1.16.2-5.el8_8.1.s390x.rpm
RedHat	8	s390x	unbound-libs	< 1.16.2-5.el8_8.1	unbound-libs-1.16.2-5.el8_8.1.s390x.rpm
RedHat	8	x86_64	unbound-debugsource	< 1.16.2-5.el8_8.1	unbound-debugsource-1.16.2-5.el8_8.1.x86_64.rpm
RedHat	8	s390x	python3-unbound	< 1.16.2-5.el8_8.1	python3-unbound-1.16.2-5.el8_8.1.s390x.rpm
RedHat	8	ppc64le	unbound-libs	< 1.16.2-5.el8_8.1	unbound-libs-1.16.2-5.el8_8.1.ppc64le.rpm
RedHat	8	aarch64	unbound-libs-debuginfo	< 1.16.2-5.el8_8.1	unbound-libs-debuginfo-1.16.2-5.el8_8.1.aarch64.rpm
RedHat	8	ppc64le	python3-unbound	< 1.16.2-5.el8_8.1	python3-unbound-1.16.2-5.el8_8.1.ppc64le.rpm
RedHat	8	i686	python3-unbound-debuginfo	< 1.16.2-5.el8_8.1	python3-unbound-debuginfo-1.16.2-5.el8_8.1.i686.rpm
RedHat	8	x86_64	python3-unbound	< 1.16.2-5.el8_8.1	python3-unbound-1.16.2-5.el8_8.1.x86_64.rpm