NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue nameserver delays the response so that the cached delegation information is expired. Upon receiving the delayed answer containing the delegation information, Unbound overwrites the now expired entries. This action can be repeated when the delegation information is about to expire making the rogue delegation information ever-updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the cached delegation information can be overwritten.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-unboundUpgrade unbound-libsUpgrade unbound-develUpgrade unbound | Nov 14, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade unbound | Mar 26, 2024 | Aug 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade unbound-develUpgrade python2-unboundUpgrade python3-unboundUpgrade unbound-libsUpgrade unboundUpgrade unbound-debuginfo | Feb 21, 2024 | Aug 1, 2022 |
| Amazon_linux_2023 | — | Upgrade unbound-debugsourceUpgrade unbound-anchor-debuginfoUpgrade unbound-utils-debuginfoUpgrade unbound-libs-debuginfoUpgrade python3-unbound-debuginfoUpgrade unbound-utilsUpgrade unbound-debuginfoUpgrade unboundUpgrade unbound-libsUpgrade python3-unboundUpgrade unbound-develUpgrade unbound-anchor | Feb 17, 2025 | Aug 1, 2022 |
| Centos_linux | — | Upgrade unbound-develUpgrade unbound-libs-debuginfoUpgrade python3-unbound-debuginfoUpgrade unbound-debuginfoUpgrade unbound-debugsourceUpgrade python3-unboundUpgrade unbound-libsUpgrade unbound | Nov 9, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade unbound | Mar 31, 2023 | Aug 1, 2022 |
| Freebsd | — | Upgrade unbound | Nov 4, 2022 | Aug 5, 2022 |
| Gentoo Linux | — | Upgrade net-dns/unbound. | Dec 19, 2022 | Aug 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade unbound-libsUpgrade unboundUpgrade python3-unbound | Nov 3, 2022 | Aug 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unbound-libsUpgrade python3-unboundUpgrade unboundUpgrade python2-unbound | Oct 11, 2022 | Aug 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade unboundUpgrade unbound-libsUpgrade python3-unbound | Nov 15, 2022 | Aug 1, 2022 |
| Oracle_linux | — | Upgrade unbound-libsUpgrade unbound-develUpgrade unboundUpgrade python3-unbound | Nov 16, 2022 | Aug 1, 2022 |
| Redhat_linux | — | Upgrade unbound-debugsourceNo solution existsUpgrade python3-unbound-debuginfoUpgrade unbound-debuginfoUpgrade unbound-libsUpgrade unbound-develUpgrade unbound-libs-debuginfoUpgrade unboundUpgrade python3-unbound | Nov 9, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade unbound-develUpgrade python3-unbound-debuginfoUpgrade unbound-debuginfoUpgrade python3-unboundUpgrade unbound-libs-debuginfoUpgrade unboundUpgrade unbound-libsUpgrade unbound-debugsource | Mar 12, 2024 | Aug 1, 2022 |
| Suse | — | Upgrade unboundUpgrade unbound-pythonUpgrade unbound-anchorUpgrade unbound-develUpgrade unbound-muninUpgrade libunbound8 | Aug 9, 2024 | Aug 1, 2022 |
| Ubuntu | — | Upgrade libunbound8Upgrade libunbound2Upgrade unbound | Aug 17, 2022 | Aug 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub