vulnerability

F5 Networks: CVE-2020-12663: K37661551: Unbound DNS Cache vulnerabilities CVE-2020-12662 and CVE-2020-12663

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
5	(AV:N/AC:L/Au:N/C:N/I:N/A:P)	May 19, 2020	Jun 25, 2020	Apr 1, 2026

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published

May 19, 2020

Added

Jun 25, 2020

Modified

Apr 1, 2026

Description

Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.

Solution

f5-big-ip-upgrade-latest

References

CVE-2020-12662
https://attackerkb.com/topics/CVE-2020-12662
CVE-2020-12663
https://attackerkb.com/topics/CVE-2020-12663
CWE-400
EUVD-EUVD-2020-4961
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-4961
https://my.f5.com/manage/s/article/K37661551

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today