Astra Linux – Vulnerability in unbound

The DNS protocol in RFC 1035 and its updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated over seconds. As a result, responses are sent in a pulsing burst, which can be considered traffic amplification in some cases. This...

Fedora 41 : unbound (2024-5f32029828)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5f32029828 advisory. Automatic update for unbound-1.19.3-1.fc41. Changelog Fri Apr 12 2024 Petr Menk - 1.19.3-1 - Update to 1.19.3 rhbz2268404 - Fix CVE-2024-1931, Denial of...

Debian: Security Advisory (DLA-3952-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : unbound (2024-a5d6cd9f0a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a5d6cd9f0a advisory. Fixed builds on F41. Fixes CVE-2024-8508 - https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1 Tenable has extracted the preceding...

[SECURITY] [DLA 3952-1] unbound security update

Debian LTS Advisory DLA-3952-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert November 14, 2024 https://wiki.debian.org/LTS Package : unbound Version : 1.13.1-1+deb11u4 CVE ID : CVE-2024-8508 Debian Bug : 1083282 A vulnerability has been discovered in unbound, a...

Debian dla-3952 : libunbound-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3952 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3952-1 [email protected] https://www.debian.org/lts/security/...

Low: unbound

Issue Overview: unbound: NULL Pointer Dereference in Unbound CVE-2024-43167 unbound: Heap-Buffer-Overflow in Unbound CVE-2024-43168 Affected Packages: unbound Issue Correction: Run dnf update unbound --releasever 2023.6.20241111 to update your system. New Packages: aarch64: ...

Low: unbound

Issue Overview: unbound: NULL Pointer Dereference in Unbound CVE-2024-43167 unbound: Heap-Buffer-Overflow in Unbound CVE-2024-43168 Affected Packages: unbound Issue Correction: Run dnf update unbound --releasever 2023.6.20241111 or dnf update --advisory ALAS2023-2024-760 --releasever...

Fedora 37 : unbound (2022-1326d2815c)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-1326d2815c advisory. - Fix CVE-2022-3204 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2024-760)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-760 advisory. unbound: NULL Pointer Dereference in Unbound CVE-2024-43167 unbound: Heap-Buffer-Overflow in Unbound CVE-2024-43168 Tenable has extracted the preceding description block directly from the teste...

DLA-3952-1 unbound - security update

Bulletin has no description...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2024-2840)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2024-2822)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2024-2917)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2024-2897)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-43167 affecting package unbound for versions less than 1.19.1-4

CVE-2024-43167 affecting package unbound for versions less than 1.19.1-4. A patched version of the package is available...

CVE-2024-8508 affecting package unbound for versions less than 1.19.1-4

CVE-2024-8508 affecting package unbound for versions less than 1.19.1-4. A patched version of the package is available...

SUSE CVE-2024-50155

In the Linux kernel, the following vulnerability has been resolved: netdevsim: use condresched in nsimdevtrapreportwork I am still seeing many syzbot reports hinting that syzbot might fool nsimdevtrapreportwork with hundreds of ports 1 Lets use condresched, and systemunboundwq instead of implicit...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2024-2917)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow flaw was found in the cfgmarkports function within Unbound's configfile.c, which can lead to memory corruption.This issue...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2024-2897)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow flaw was found in the cfgmarkports function within Unbound's configfile.c, which can lead to memory corruption.This issue...