DSA-5620-1: Unbound Security Update
Summary
DSA-5620-1: unbound - security update. Affects unbound versions < 1.13.1-1+deb11u2. Fixed in 1.13.1-1+deb11u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Unbound is a validating, recursive, and caching DNS resolver. It is designed to be fast and secure, providing DNSSEC validation and protection against various DNS-related attacks. However, a vulnerability has been discovered in Unbound that could potentially allow an attacker to execute arbitrary code or cause a denial of service.
Vulnerability Detail
The vulnerability, identified as CVE-2023-50387 and CVE-2023-50868, affects the Debian 11 and Debian 12 versions of Unbound. It arises from a flaw in the processing of certain DNS responses, which can be exploited by a remote attacker to execute arbitrary code or crash the Unbound service. This could lead to a compromise of the DNS resolver or a disruption of DNS resolution services.
How To Fix
Minimum fixed version
1.13.1-1+deb11u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade unboundTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update Unbound to the fixed versions mentioned above.
Conclusion
In conclusion, the Unbound security update addresses a vulnerability that could allow remote code execution or denial of service. It is crucial to update Unbound to the fixed versions to mitigate the risk. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for unbound →
FAQ
Unbound is a validating, recursive, and caching DNS resolver that provides DNSSEC validation and protection against DNS-related attacks.
The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service, potentially compromising the DNS resolver or disrupting DNS resolution services.
The vulnerability affects Unbound versions in Debian 11 and Debian 12.
To fix this vulnerability, update Unbound to version 1.13.1-1+deb11u2 for Debian 11 and version 1.17.1-2+deb12u2 for Debian 12.
No, there is no known workaround. Updating Unbound to the fixed versions is necessary.
Related vulnerabilities
Recent vulnerabilities recorded for unbound.
