The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the "DNSBomb" issue.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-python3-unboundalma-upgrade-unboundalma-upgrade-unbound-develalma-upgrade-unbound-dracutalma-upgrade-unbound-libs | May 27, 2026 | May 19, 2026 | |
| Alpine Linux | alpine-linux-upgrade-unbound | Aug 22, 2024 | Jun 6, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-python2-unboundamazon-linux-ami-2-upgrade-python3-unboundamazon-linux-ami-2-upgrade-unboundamazon-linux-ami-2-upgrade-unbound-anchoramazon-linux-ami-2-upgrade-unbound-debuginfoamazon-linux-ami-2-upgrade-unbound-develamazon-linux-ami-2-upgrade-unbound-libsamazon-linux-ami-2-upgrade-unbound-utils | May 16, 2024 | May 16, 2024 | |
| Amazon_linux | — | amazon-linux-upgrade-unbound | May 13, 2025 | May 13, 2024 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-python3-unboundamazon-linux-2023-upgrade-python3-unbound-debuginfoamazon-linux-2023-upgrade-unboundamazon-linux-2023-upgrade-unbound-anchoramazon-linux-2023-upgrade-unbound-anchor-debuginfoamazon-linux-2023-upgrade-unbound-debuginfoamazon-linux-2023-upgrade-unbound-debugsourceamazon-linux-2023-upgrade-unbound-develamazon-linux-2023-upgrade-unbound-libsamazon-linux-2023-upgrade-unbound-libs-debuginfoamazon-linux-2023-upgrade-unbound-utilsamazon-linux-2023-upgrade-unbound-utils-debuginfo | Feb 17, 2025 | May 9, 2024 | |
| Debian | debian-upgrade-unbound | May 15, 2025 | Jun 6, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-python3-unboundhuawei-euleros-2_0_sp10-upgrade-unboundhuawei-euleros-2_0_sp10-upgrade-unbound-libs | Jan 14, 2025 | Jun 6, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-python3-unboundhuawei-euleros-2_0_sp11-upgrade-unboundhuawei-euleros-2_0_sp11-upgrade-unbound-libs | Dec 12, 2024 | Jun 6, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-python3-unboundhuawei-euleros-2_0_sp12-upgrade-unboundhuawei-euleros-2_0_sp12-upgrade-unbound-libs | Dec 12, 2024 | Jun 6, 2024 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-python3-unboundredhat-upgrade-python3-unbound-debuginforedhat-upgrade-unboundredhat-upgrade-unbound-anchorredhat-upgrade-unbound-anchor-debuginforedhat-upgrade-unbound-debuginforedhat-upgrade-unbound-debugsourceredhat-upgrade-unbound-develredhat-upgrade-unbound-dracutredhat-upgrade-unbound-libsredhat-upgrade-unbound-libs-debuginforedhat-upgrade-unbound-utilsredhat-upgrade-unbound-utils-debuginfo | Jul 9, 2025 | Jun 6, 2024 | |
| Rocky_linux | rocky-upgrade-python3-unboundrocky-upgrade-python3-unbound-debuginforocky-upgrade-unboundrocky-upgrade-unbound-anchorrocky-upgrade-unbound-anchor-debuginforocky-upgrade-unbound-debuginforocky-upgrade-unbound-debugsourcerocky-upgrade-unbound-develrocky-upgrade-unbound-dracutrocky-upgrade-unbound-libsrocky-upgrade-unbound-libs-debuginforocky-upgrade-unbound-utilsrocky-upgrade-unbound-utils-debuginfo | Jun 1, 2026 | May 28, 2026 | |
| Suse | — | suse-upgrade-libunbound8suse-upgrade-python3-unboundsuse-upgrade-unboundsuse-upgrade-unbound-anchorsuse-upgrade-unbound-devel | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | ubuntu-upgrade-libunbound8ubuntu-upgrade-unbound | Jun 6, 2024 | May 28, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub