net-dns/unbound-1.25.1 — Security Advisories

▸ GLSA 202212-02 Unbound: Multiple Vulnerabilities this version unaffected low remote 2022-12-19

Multiple vulnerabilities have been discovered in Unbound, the worst of which could result in denial of service.

Announced: 2022-12-19
Revised: 2022-12-19
Access: remote
Bugs: #872209 #866881
Advisory: https://security.gentoo.org/glsa/202212-02

Affected packages

Package	Arch	Vulnerable	Unaffected
net-dns/unbound	*	< 1.16.3	>= 1.16.3

Background

Unbound is a validating, recursive, and caching DNS resolver.

Description

Multiple vulnerabilities have been discovered in Unbound. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Unbound users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-dns/unbound-1.16.3"

References

▸ GLSA 201904-03 Unbound: Multiple vulnerabilities this version unaffected normal remote 2019-04-02

Multiple vulnerabilities have been found in Unbound, the worst of which could lead to privilege escalation.

Announced: 2019-04-02
Revised: 2019-04-02
Access: remote
Bugs: #641042 #677054
Advisory: https://security.gentoo.org/glsa/201904-03

Affected packages

Package	Arch	Vulnerable	Unaffected
net-dns/unbound	*	< 1.8.3	>= 1.8.3

Background

Unbound is a validating, recursive, and caching DNS resolver.

Description

Multiple vulnerabilities have been discovered in Unbound. Please review the referenced bugs for details.

Impact

Please review the referenced bugs for details.

Workaround

There is no known workaround at this time.

Resolution

All Unbound users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-dns/unbound-1.8.3"

▸ GLSA 201311-18 Unbound: Denial of service this version unaffected normal remote 2013-11-28

Multiple Denial of Service vulnerabilities have been found in Unbound.

Announced: 2013-11-28
Revised: 2013-11-28
Access: remote
Bugs: #395287
Advisory: https://security.gentoo.org/glsa/201311-18

Affected packages

Package	Arch	Vulnerable	Unaffected
net-dns/unbound	*	< 1.4.13_p2	>= 1.4.13_p2

Background

Unbound is a validating, recursive, and caching DNS resolver.

Description

Multiple vulnerabilities have been discovered in Unbound. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly cause a Denial of Service condition via a specially crafted response.

Workaround

There is no known workaround at this time.

Resolution

All Unbound users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-dns/unbound-1.4.13_p2"

References

▸ GLSA 201110-12 Unbound: Denial of service this version unaffected normal remote 2011-10-15

Multiple Denial of Service vulnerabilities were found in Unbound.

Announced: 2011-10-15
Revised: 2011-10-15
Access: remote
Bugs: #309117 #368981
Advisory: https://security.gentoo.org/glsa/201110-12

Affected packages

Package	Arch	Vulnerable	Unaffected
net-dns/unbound	*	< 1.4.10	>= 1.4.10

Background

Unbound is a validating, recursive, and caching DNS resolver.

Description

Multiple vulnerabilities have been discovered in unbound. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could cause a Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All Unbound users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-dns/unbound-1.4.10"