Denial Of Service (DoS)

2020-06-0902:45:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.015 Low

EPSS

Percentile

87.2%

JSON

unbound is vulnerable to Denial of Service (DoS). The attack exists because of an Insufficient Control of Network Message Volume, aka an “NXNSAttack” issue. This is triggered by random subdomains in the NSDNAME in NS records.

CPENameOperatorVersion
unboundeq1.7.3__8.el8
unboundeq1.4.20__26.el6_10.1
unboundeq1.6.6__3.el7
unboundeq1.4.20__23.el6.3
unboundeq1.4.20__23.el6.1
unboundeq1.4.20__23.el6_9.4
unboundeq1.8.3-r3
unbound:3.11eq1.9.6-r0
unbound:3.10eq1.9.1-r7
unbound:focaleq1.9.4-2ubuntu1

Name	Operator	Version
unbound	eq	1.7.3__8.el8
unbound	eq	1.4.20__26.el6_10.1
unbound	eq	1.6.6__3.el7
unbound	eq	1.4.20__23.el6.3
unbound	eq	1.4.20__23.el6.1
unbound	eq	1.4.20__23.el6_9.4
unbound	eq	1.8.3-r3
unbound:3.11	eq	1.9.6-r0
unbound:3.10	eq	1.9.1-r7
unbound:focal	eq	1.9.4-2ubuntu1