The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the "DNSBomb" issue.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade unboundUpgrade unbound-libsUpgrade python3-unboundUpgrade unbound-dracutUpgrade unbound-devel | May 27, 2026 | May 19, 2026 |
| Alpine Linux | — | Upgrade unbound | Aug 22, 2024 | Jun 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade unbound-anchorUpgrade unboundUpgrade unbound-libsUpgrade unbound-develUpgrade python3-unboundUpgrade python2-unboundUpgrade unbound-debuginfoUpgrade unbound-utils | May 16, 2024 | May 16, 2024 |
| Amazon_linux | — | Upgrade unbound | May 13, 2025 | May 13, 2024 |
| Amazon_linux_2023 | — | Upgrade unboundUpgrade unbound-anchorUpgrade python3-unboundUpgrade unbound-libsUpgrade unbound-utilsUpgrade unbound-debuginfoUpgrade unbound-debugsourceUpgrade unbound-develUpgrade python3-unbound-debuginfoUpgrade unbound-libs-debuginfoUpgrade unbound-anchor-debuginfoUpgrade unbound-utils-debuginfo | Feb 17, 2025 | May 9, 2024 |
| Debian | — | Upgrade unbound | May 15, 2025 | Jun 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-unboundUpgrade unbound-libsUpgrade unbound | Jan 14, 2025 | Jun 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade unboundUpgrade python3-unboundUpgrade unbound-libs | Dec 12, 2024 | Jun 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade unbound-libsUpgrade unboundUpgrade python3-unbound | Dec 12, 2024 | Jun 6, 2024 |
| Redhat_linux | — | Upgrade unbound-utils-debuginfoUpgrade python3-unboundUpgrade python3-unbound-debuginfoUpgrade unbound-libs-debuginfoUpgrade unbound-debugsourceUpgrade unbound-utilsUpgrade unbound-anchor-debuginfoUpgrade unbound-debuginfoNo solution existsUpgrade unbound-dracutUpgrade unbound-develUpgrade unbound-anchorUpgrade unboundUpgrade unbound-libs | Jul 9, 2025 | Jun 6, 2024 |
| Rocky_linux | — | Upgrade unbound-libs-debuginfoUpgrade python3-unboundUpgrade unbound-anchor-debuginfoUpgrade unbound-utilsUpgrade python3-unbound-debuginfoUpgrade unbound-debuginfoUpgrade unbound-develUpgrade unbound-anchorUpgrade unboundUpgrade unbound-utils-debuginfoUpgrade unbound-dracutUpgrade unbound-libsUpgrade unbound-debugsource | Jun 1, 2026 | May 28, 2026 |
| Suse | — | Upgrade unboundUpgrade python3-unboundUpgrade unbound-develUpgrade libunbound8Upgrade unbound-anchor | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | — | Upgrade libunbound8Upgrade unbound | Jun 6, 2024 | May 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub