(RHSA-2024:0977) Important: unbound security update

2024-02-2608:31:18

access.redhat.com

rhsa-2024-0977 unbound dns dnssec cpu consumption cpu resource exhaustion

6.9 Medium

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%

JSON

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9i686unbound-devel< 1.16.2-3.el9_3.1unbound-devel-1.16.2-3.el9_3.1.i686.rpm
RedHat9i686unbound-libs-debuginfo< 1.16.2-3.el9_3.1unbound-libs-debuginfo-1.16.2-3.el9_3.1.i686.rpm
RedHat9i686unbound-libs< 1.16.2-3.el9_3.1unbound-libs-1.16.2-3.el9_3.1.i686.rpm
RedHat9s390xpython3-unbound< 1.16.2-3.el9_3.1python3-unbound-1.16.2-3.el9_3.1.s390x.rpm
RedHat9i686python3-unbound-debuginfo< 1.16.2-3.el9_3.1python3-unbound-debuginfo-1.16.2-3.el9_3.1.i686.rpm
RedHat9x86_64unbound-devel< 1.16.2-3.el9_3.1unbound-devel-1.16.2-3.el9_3.1.x86_64.rpm
RedHat9aarch64unbound-devel< 1.16.2-3.el9_3.1unbound-devel-1.16.2-3.el9_3.1.aarch64.rpm
RedHat9aarch64unbound-debugsource< 1.16.2-3.el9_3.1unbound-debugsource-1.16.2-3.el9_3.1.aarch64.rpm
RedHat9aarch64unbound-libs-debuginfo< 1.16.2-3.el9_3.1unbound-libs-debuginfo-1.16.2-3.el9_3.1.aarch64.rpm
RedHat9ppc64leunbound-devel< 1.16.2-3.el9_3.1unbound-devel-1.16.2-3.el9_3.1.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	i686	unbound-devel	< 1.16.2-3.el9_3.1	unbound-devel-1.16.2-3.el9_3.1.i686.rpm
RedHat	9	i686	unbound-libs-debuginfo	< 1.16.2-3.el9_3.1	unbound-libs-debuginfo-1.16.2-3.el9_3.1.i686.rpm
RedHat	9	i686	unbound-libs	< 1.16.2-3.el9_3.1	unbound-libs-1.16.2-3.el9_3.1.i686.rpm
RedHat	9	s390x	python3-unbound	< 1.16.2-3.el9_3.1	python3-unbound-1.16.2-3.el9_3.1.s390x.rpm
RedHat	9	i686	python3-unbound-debuginfo	< 1.16.2-3.el9_3.1	python3-unbound-debuginfo-1.16.2-3.el9_3.1.i686.rpm
RedHat	9	x86_64	unbound-devel	< 1.16.2-3.el9_3.1	unbound-devel-1.16.2-3.el9_3.1.x86_64.rpm
RedHat	9	aarch64	unbound-devel	< 1.16.2-3.el9_3.1	unbound-devel-1.16.2-3.el9_3.1.aarch64.rpm
RedHat	9	aarch64	unbound-debugsource	< 1.16.2-3.el9_3.1	unbound-debugsource-1.16.2-3.el9_3.1.aarch64.rpm
RedHat	9	aarch64	unbound-libs-debuginfo	< 1.16.2-3.el9_3.1	unbound-libs-debuginfo-1.16.2-3.el9_3.1.aarch64.rpm
RedHat	9	ppc64le	unbound-devel	< 1.16.2-3.el9_3.1	unbound-devel-1.16.2-3.el9_3.1.ppc64le.rpm