Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade unbound | Sep 23, 2020 | May 19, 2020 |
| Amazon Linux Ami 2 | — | Upgrade unbound-pythonUpgrade unbound-debuginfoUpgrade unbound-develUpgrade unboundUpgrade unbound-libs | May 22, 2020 | May 19, 2020 |
| Amazon_linux | — | Upgrade unbound | Jun 4, 2020 | May 19, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 19, 2020 |
| Centos_linux | — | Upgrade python3-unboundUpgrade unbound-libs-debuginfoUpgrade unbound-pythonUpgrade unbound-debuginfoUpgrade python3-unbound-debuginfoUpgrade unboundUpgrade unbound-libsUpgrade unbound-debugsourceUpgrade unbound-devel | Jun 10, 2020 | May 19, 2020 |
| Debian | — | Upgrade unbound | May 28, 2020 | May 19, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 3, 2020 |
| Freebsd | — | Upgrade unboundUpgrade FreeBSD | May 23, 2020 | May 22, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade unbound-libsUpgrade unbound | Nov 3, 2020 | May 19, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade unbound-libsUpgrade unbound | Sep 28, 2020 | May 19, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade unboundUpgrade unbound-libs | Sep 3, 2020 | May 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unboundUpgrade unbound-libsUpgrade python3-unboundUpgrade python2-unbound | Jul 31, 2020 | May 19, 2020 |
| Oracle_linux | — | Upgrade unbound-pythonUpgrade python3-unboundUpgrade unbound-libsUpgrade unboundUpgrade unbound-devel | Jun 9, 2020 | May 19, 2020 |
| Redhat_linux | — | Upgrade python3-unboundUpgrade unbound-develUpgrade unbound-pythonUpgrade python3-unbound-debuginfoUpgrade unbound-libs-debuginfoUpgrade unbound-debuginfoUpgrade unbound-libsUpgrade unboundUpgrade unbound-debugsource | Jun 10, 2020 | May 19, 2020 |
| Suse | — | Upgrade libunbound2Upgrade unboundUpgrade unbound-pythonUpgrade unbound-anchorUpgrade unbound-muninUpgrade libunbound-devel-miniUpgrade unbound-devel | Jun 30, 2020 | May 19, 2020 |
| Ubuntu | — | Upgrade libunbound8Upgrade libunbound2Upgrade unbound | May 28, 2020 | May 19, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub