Moderate Security Vulnerability in Unbound Packages: DNS Cache Poisoning Risk
Summary
ALSA-2026:68291: Moderate: unbound security update. Affects python3-unbound versions < 1.24.2-7.el10_2.5. Fixed in 1.24.2-7.el10_2.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Unbound is a validating, recursive, and caching DNS or DNSSEC resolver widely used for its reliability and performance. It plays a crucial role in translating domain names into IP addresses, ensuring secure and efficient internet navigation. However, it is susceptible to vulnerabilities that can compromise its integrity, such as the recent issue identified as CVE-2026-50252, which exposes it to DNS cache poisoning attacks due to UDP source port predictability.
Vulnerability Detail
The vulnerability CVE-2026-50252 in Unbound arises from predictable UDP source ports, allowing attackers to exploit this weakness to perform DNS cache poisoning. This could lead to users being redirected to malicious sites, potentially resulting in data theft, malware infections, or other security breaches. The flaw affects various versions of Unbound, and its impact is significant, especially for systems relying on DNS for critical operations.
How To Fix
Minimum fixed version
1.24.2-7.el10_2.5
This is the first release that contains the fix.
sudo dnf update python3-unboundTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider implementing firewall rules to restrict access to the DNS resolver from untrusted networks. Additionally, using DNS over HTTPS (DoH) or DNS over TLS (DoT) can help mitigate the risk until the patch is applied.
Conclusion
The recent vulnerability in Unbound packages poses a moderate risk due to DNS cache poisoning potential. It is crucial for users to update their packages to the latest patched version to mitigate this risk. Implementing workarounds can provide temporary relief while ensuring that systems remain secure.
See every vulnerability recorded for python3-unbound →
FAQ
CVE-2026-50252 is a security vulnerability in Unbound that allows DNS cache poisoning due to predictable UDP source ports.
It can lead to users being redirected to malicious websites, resulting in potential data theft or malware infections.
Implement firewall rules to restrict access to the DNS resolver and consider using DNS over HTTPS or DNS over TLS as a temporary measure.
Detailed information can be found on the CVE page for CVE-2026-50252 and related advisories from AlmaLinux.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights.
Related vulnerabilities
Recent vulnerabilities recorded for python3-unbound.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
