A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-unbound | Feb 19, 2019 | Jan 23, 2018 | |
| Freebsd | freebsd-upgrade-package-unbound | Jan 20, 2018 | Jan 19, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-unboundhuawei-euleros-2_0_sp2-upgrade-unbound-libs | Dec 4, 2019 | Jan 23, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-unboundhuawei-euleros-2_0_sp3-upgrade-unbound-libs | Dec 18, 2019 | Jan 23, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-unboundhuawei-euleros-2_0_sp5-upgrade-unbound-libs | Nov 19, 2019 | Jan 23, 2018 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 23, 2018 | |
| Suse | — | suse-upgrade-libunbound2suse-upgrade-unbound-anchorsuse-upgrade-unbound-devel | May 20, 2018 | Oct 8, 2017 |
| Ubuntu | ubuntu-upgrade-libunbound2ubuntu-upgrade-unbound | Jun 13, 2018 | Oct 8, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub