DSA-3097-1: unbound - Denial of Service Vulnerability
Summary
DSA-3097-1: unbound - security update. Affects unbound versions < 1.4.17-3+deb7u2. Fixed in 1.4.17-3+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Unbound is a validating, recursive, and caching DNS resolver. It is responsible for resolving domain names into IP addresses and vice versa. Unbound is widely used in various systems and applications to provide DNS resolution services.
Vulnerability Detail
Florian Maury from ANSSI discovered a denial of service vulnerability in unbound. By crafting a malicious zone and emitting queries to the server, an attacker can trick the resolver into following an endless series of delegations. This can lead to resource exhaustion and result in significant network usage.
How To Fix
Minimum fixed version
1.4.17-3+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade unboundTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The unbound package is vulnerable to a denial of service vulnerability. It is recommended to upgrade to the fixed versions mentioned in the advisory. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for unbound →
FAQ
Unbound is a validating, recursive, and caching DNS resolver used for domain name resolution.
This vulnerability can be exploited by an attacker to cause denial of service, leading to resource exhaustion and excessive network usage.
To fix this vulnerability, upgrade the unbound package to the recommended versions.
No specific workaround has been provided for this vulnerability.
For more information, refer to the DSA-3097-1 advisory on the Debian Security website.
Related vulnerabilities
Recent vulnerabilities recorded for unbound.
