CVE-2022-30698 Novel "ghost domain names" attack by introducing subdomain delegations

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

CVE-2022-30698

Summary: CVE-2022-30698/30699 affect NLnet Labs Unbound up to 1.16.1. The attack targets a resolver by exploiting rogue delegation information to repeatedly refresh child delegations, keeping a malicious domain name resolvable longer than its revocation. Starting with 1.16.2, Unbound verifies par...

NLnet Labs Unbound 代码问题漏洞

NLnet Labs Unbound is an open source DNS server from NLnet Labs. A code issue vulnerability exists in NLnet Labs Unbound version 1.16.1 and prior versions, which stems from a vulnerability that allows a malicious user to continue triggering the resolvability of malicious domain names...

Unbound -- Multiple vulnerabilities

NLnet Labs reports: novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue nameserver delays the response so that the cached delegation...

CVE-2022-30699

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue...

NLnet Labs Unbound 代码问题漏洞

NLnet Labs Unbound is an open source DNS server from NLnet Labs. A code issue vulnerability exists in NLnet Labs Unbound version 1.16.1 and prior versions, which stems from a vulnerability that allows a malicious user to continue triggering the resolvability of malicious domain names...

CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

new packages: unbound

An update is available for unbound. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

NewStart CGSL MAIN 6.02 : unbound Multiple Vulnerabilities (NS-SA-2022-0064)

The remote NewStart CGSL host, running version MAIN 6.02, has unbound packages installed that are affected by multiple vulnerabilities: - DISPUTED Unbound before 1.9.5 allows an integer overflow in the regional allocator via regionalalloc. NOTE: The vendor disputes that this is a vulnerability...

CVE-2020-12662 affecting package unbound for versions less than 1.10.0-5

CVE-2020-12662 affecting package unbound for versions less than 1.10.0-5. A patched version of the package is available...

CVE-2020-12663 affecting package unbound for versions less than 1.10.0-5

CVE-2020-12663 affecting package unbound for versions less than 1.10.0-5. A patched version of the package is available...

CVE-2020-28935 affecting package unbound for versions less than 1.10.0-5

CVE-2020-28935 affecting package unbound for versions less than 1.10.0-5. A patched version of the package is available...

RHEL 8 : unbound (RHSA-2022:0632)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0632 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: integer overflow in the...

unbound: assertion failure and denial of service in synth_cname

A flaw was found in unbound. A reachable assertion in the synthcname function can be triggered by sending invalid packets to the server. If asserts are disabled during compilation, this issue might lead to an out-of-bounds write in dnamepktcopy function. The highest threat from this vulnerability...

unbound: symbolic link traversal when writing PID file

A symbolic link traversal vulnerability was found in unbound in the way it writes its PID file while starting up. This flaw allows a local attacker with access to the unbound user to set up a link to another file, owned by root, and make unbound overwrite it during its next restart, destroying th...

unbound: assertion failure and denial of service in dname_pkt_copy via an invalid packet

A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered by sending invalid packets to the server. The highest threat from this vulnerability is to service availability...

unbound: integer overflow in a size calculation in respip/respip.c

A flaw was found in unbound. An integer overflow in ubpackedrrsetkey function may lead to a buffer overflow of the allocated buffer if the size can be controlled by an attacker. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability...

unbound: assertion failure via a compressed name in dname_pkt_copy

A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered through compressed names. The highest threat from this vulnerability is to service availability...

unbound: out-of-bounds write via a compressed name in rdata_copy

A flaw was found in unbound. An out-of-bounds write in the rdatacopy function may be abused by a remote attacker. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability...