Unbound vulnerability

2018-06-0700:00:00

ubuntu.com

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

Releases

Ubuntu 18.04 ESM
Ubuntu 17.10
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

unbound - validating, recursive, caching DNS resolver

Details

Ralph Dolmans and Karst Koymans discovered that Unbound did not properly
handle certain NSEC records. An attacker could use this to to prove the
non-existence (NXDOMAIN answer) of an existing wildcard record, or trick
Unbound into accepting a NODATA proof.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlibunbound2< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchlibunbound-dev< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchlibunbound2-dbgsym< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchpython-unbound< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchpython-unbound-dbgsym< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchpython3-unbound< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchpython3-unbound-dbgsym< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchunbound< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchunbound-anchor< 1.6.7-1ubuntu2.1UNKNOWN
Ubuntu18.04noarchunbound-anchor-dbgsym< 1.6.7-1ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	libunbound2	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	libunbound-dev	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	libunbound2-dbgsym	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	python-unbound	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	python-unbound-dbgsym	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	python3-unbound	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	python3-unbound-dbgsym	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	unbound	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	unbound-anchor	< 1.6.7-1ubuntu2.1	UNKNOWN
Ubuntu	18.04	noarch	unbound-anchor-dbgsym	< 1.6.7-1ubuntu2.1	UNKNOWN