Lucene search
+L

102 matches found

OSV
OSV
added 2025/12/16 4:12 p.m.9 views

CLSA-2025-1765901537 unbound: Fix of CVE-2024-8508

CVE-2024-8508: limit number of name compression calculations per packet to prevent denial of service attacks...

5.3CVSS6.8AI score0.00801EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.6 views

TencentOS Server 4: unbound (TSSA-2025:0633)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0633 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

5.3CVSS6.6AI score0.00801EPSS
Exploits0References2
OSV
OSV
added 2025/10/04 12:11 a.m.4 views

RLSA-2025:8197 Moderate: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbounded name compression could lead to Denial of Service CVE-2024-8508 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

5.3CVSS6.5AI score0.00801EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-49228

Malicious code in bioql PyPI...

5.3CVSS6.7AI score0.00801EPSS
Exploits0References1
OSV
OSV
added 2025/10/03 7:56 p.m.6 views

RLSA-2025:8047 Moderate: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbounded name compression could lead to Denial of Service CVE-2024-8508 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

5.3CVSS6.6AI score0.00801EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/07/28 11:33 p.m.6 views

SUSE CVE-2024-55628

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log...

7.5CVSS6.9AI score0.0068EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/12 3:30 a.m.9 views

CVE-2025-24294

The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...

0.00539EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/06/09 12:0 a.m.7 views

NewStart CGSL MAIN 7.02 : unbound Vulnerability (NS-SA-2025-0089)

The remote NewStart CGSL host, running version MAIN 7.02, has unbound packages installed that are affected by a vulnerability: - NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression fo...

5.3CVSS6.7AI score0.00801EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/05/27 11:49 a.m.5 views

unbound: Unbounded name compression could lead to Denial of Service

A flaw was found in Unbound which can lead to degraded performance and an eventual denial of service when handling replies with very large RRsets that require name compression to be applied. Versions prior to 1.21.1 do not have a hard limit on the number of name compression calculations that...

5.3CVSS7.2AI score0.00801EPSS
Exploits0References5
OSV
OSV
added 2025/05/27 8:57 a.m.5 views

SUSE-SU-2025:20359-1 Security update for unbound

This update for unbound fixes the following issues: Update to 1.22.0: - CVE-2024-8508: Fixed unbounded name compression that could have led to a denial of service bsc1231284...

5.3CVSS7.4AI score0.00801EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/05/27 8:56 a.m.2 views

Security update for unbound

This update for unbound fixes the following issues: Update to 1.22.0: CVE-2024-8508: Fixed unbounded name compression that could have led to a denial of service bsc1231284. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

6.9CVSS7.2AI score0.00801EPSS
Exploits0References4
Oracle linux
Oracle linux
added 2025/05/27 12:0 a.m.12 views

unbound security update

1.16.2-18 - Prevent unbounded name compression CVE-2024-8508...

5.3CVSS7AI score0.00801EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/05/20 5:29 p.m.7 views

unbound: Unbounded name compression could lead to Denial of Service

A flaw was found in Unbound which can lead to degraded performance and an eventual denial of service when handling replies with very large RRsets that require name compression to be applied. Versions prior to 1.21.1 do not have a hard limit on the number of name compression calculations that...

5.3CVSS7.2AI score0.00801EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2024-8508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name...

5.3CVSS6.6AI score0.00801EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/01/30 1:0 p.m.4 views

unbound: Unbounded name compression could lead to Denial of Service

A flaw was found in Unbound which can lead to degraded performance and an eventual denial of service when handling replies with very large RRsets that require name compression to be applied. Versions prior to 1.21.1 do not have a hard limit on the number of name compression calculations that...

5.3CVSS7.2AI score0.00801EPSS
Exploits0References5
Oracle linux
Oracle linux
added 2025/01/30 12:0 a.m.183 views

unbound security update

1.16.2-5.8 - Prevent unbounded name compression CVE-2024-8508 1.16.2-5.7 - Rebuild to propagate to CentOS Stream RHEL-25500...

8CVSS7.1AI score0.00801EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/01/14 12:0 a.m.38 views

EulerOS 2.0 SP9 : unbound (EulerOS-SA-2025-1065)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to...

5.3CVSS6.7AI score0.00801EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/01/14 12:0 a.m.22 views

EulerOS 2.0 SP9 : unbound (EulerOS-SA-2025-1048)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to...

5.3CVSS6.7AI score0.00801EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/01/13 12:0 a.m.66 views

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2025-1015)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries t...

7.5CVSS6.8AI score0.01743EPSS
Exploits0References3
OSV
OSV
added 2025/01/10 10:9 a.m.15 views

CLSA-2025-1736503760 unbound: Fix of CVE-2024-8508

CVE-2024-8508: Limit number of name compression calculations per packet to prevent CPU lock and potential denial of service...

5.3CVSS6.7AI score0.00801EPSS
Exploits0References1
Rows per page
Query Builder