Unbound vulnerabilities

2 known vulnerabilities in Unbound from Nlnetlabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Unbound: Loop with Unreachable Exit Condition

  CVE-2024-1931Mar 7, 2024NLnet LabsEPSS 2.52%

  NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path that can lead to an infinite loop. Unbound 1.18.0 introduced a feature that removes EDE records from responses

• 7.5 High severity

  Enterprise Linux: Allocation of Resources Without Limits or Throttling

  CVE-2023-50387Feb 14, 2024Red HatEPSS 100%

  Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when ther