{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-42959: use the correct counter when collecting ADDITIONAL rrsets for validation\n- CVE-2026-42960: only mark in-bailiwick NS glue in the authority section as glue\n- CVE-2026-81634: count the owner name in the canonical rrset size check\n- CVE-2026-81642: check buffer bounds when canonicalizing rdata for signature verification\n- CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation (ghost domain)\n- CVE-2026-82717: harden pkt_dname_len() and rdata_copy() against inconsistent name walks", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux6els/advisories/2026/clsa-2026_1793168282.json" } ], "tracking": { "current_release_date": "2026-10-28T09:57:33Z", "generator": { "date": "2026-10-28T09:57:33Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1793168282", "initial_release_date": "2026-10-28T06:18:58Z", "revision_history": [ { "date": "2026-10-28T06:18:58Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-28T09:57:33Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "unbound: Fix of 6 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 6", "product": { "name": "Oracle Linux 6", "product_id": "Oracle-Linux-6", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product": { "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_id": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound@1.4.20-29.el6_10.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_id": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-libs@1.4.20-29.el6_10.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_id": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-devel@1.4.20-29.el6_10.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product": { "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_id": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-python@1.4.20-29.el6_10.1.tuxcare.els2?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product": { "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_id": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound@1.4.20-29.el6_10.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_id": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-libs@1.4.20-29.el6_10.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_id": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-devel@1.4.20-29.el6_10.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product": { "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_id": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-python@1.4.20-29.el6_10.1.tuxcare.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686" }, "product_reference": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686" }, "product_reference": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686" }, "product_reference": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686" }, "product_reference": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-25040", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition ('Infinite Loop')" }, "notes": [ { "category": "description", "text": "Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2019-25040" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html" }, { "category": "external", "summary": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/", "url": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210507-0007/", "url": "https://security.netapp.com/advisory/ntap-20210507-0007/" } ], "release_date": "2021-04-27T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2019-25037", "cwe": { "id": "CWE-617", "name": "Reachable Assertion" }, "notes": [ { "category": "description", "text": "Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2019-25037" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html" }, { "category": "external", "summary": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/", "url": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210507-0007/", "url": "https://security.netapp.com/advisory/ntap-20210507-0007/" } ], "release_date": "2021-04-27T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-40622", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain window by up to one cached TTL configured value. Similar to other 'ghost domain names' attacks, an adversary needs to control a (ghost) zone and be able to query a vulnerable Unbound. A single client NS query can cause Unbound to overwrite the cached expired parent-side referral NS rrset with the child-side apex NS rrset and essentially extend the ghost domain window by up to one cached TTL configured value ('cache-max-ttl'). In configurations where 'harden-referral-path: yes' is used (non-default configuration), no client NS query is required since Unbound implicitly performs that query. Unbound 1.25.1 contains a patch with a fix that does not allow extension of TTLs for (parent) NS records regardless of their trust.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-40622" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-40622.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-40622.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2019-25032", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2019-25032" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html" }, { "category": "external", "summary": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/", "url": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210507-0007/", "url": "https://security.netapp.com/advisory/ntap-20210507-0007/" } ], "release_date": "2021-04-27T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2019-25036", "cwe": { "id": "CWE-617", "name": "Reachable Assertion" }, "notes": [ { "category": "description", "text": "Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2019-25036" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html" }, { "category": "external", "summary": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/", "url": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210507-0007/", "url": "https://security.netapp.com/advisory/ntap-20210507-0007/" } ], "release_date": "2021-04-27T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2019-25041", "cwe": { "id": "CWE-617", "name": "Reachable Assertion" }, "notes": [ { "category": "description", "text": "Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2019-25041" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html" }, { "category": "external", "summary": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/", "url": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210507-0007/", "url": "https://security.netapp.com/advisory/ntap-20210507-0007/" } ], "release_date": "2021-04-27T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-42960", "cwe": { "id": "CWE-349", "name": "Acceptance of Extraneous Untrusted Data With Trusted Data" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section. Promiscuous RRSets that complement DNS replies in the authority section can be used to trick Unbound to cache such records. If an adversary is able to attach such records in a reply (i.e., spoofed packet, fragmentation attack) he would be able to poison Unbound's cache. A malicious actor can exploit the possible poisonous effect by injecting RRSets other than NS that are also accompanied by address records in a reply, for example MX. This could be achieved by trying to spoof a reply packet or fragmentation attacks. Unbound would then accept the relative address records in the additional section and cache them if the authority RRSet has enough trust at this point, i.e., in-zone data for the delegation point. Unbound 1.25.1 contains a patch with a fix that disregards address records from the additional section if they are not explicitly relevant only to authority NS records, mitigating the possible poison effect. This is a complement fix to CVE-2025-11411.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42960" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42960.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42960.txt" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-82717", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to enforce(rewrite) a max TTL value in the packet buffer. Coupled with a compression pointer that points to the overwritten value and invalidates the domain name, it leads to an error path that does not properly move the buffer position and allows for the heap buffer overflow. Since this is heavily reliant on heap memory layout, results are memory corruption that eventually leads to a crash and under specific systems and compilation options remote code execution.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-82717" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-82717.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-82717.txt" } ], "release_date": "2026-09-16T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-42959", "cwe": { "id": "CWE-824", "name": "Access of Uninitialized Pointer" }, "notes": [ { "category": "description", "text": "NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code uses the wrong counter to calculate write offsets for ADDITIONAL section rrsets. DNAME duplication could increase the ANSWER section count and authority filtering could decrease the AUTHORITY section count and create an uninitialized array slot. Combining these two, the validator later dereferences this uninitialized pointer, causing an immediate process crash. An adversary controlling a DNSSEC-signed domain can trigger this bug with a single query by configuring a DNAME chain with unsigned CNAMEs and a response containing unsigned AUTHORITY records alongside signed ADDITIONAL glue records. Unbound 1.25.1 contains a patch with a fix to use the proper counters to calculate the write offsets.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42959" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42959.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42959.txt" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19752", "url": "https://access.redhat.com/errata/RHSA-2026:19752" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23231", "url": "https://access.redhat.com/errata/RHSA-2026:23231" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24365", "url": "https://access.redhat.com/errata/RHSA-2026:24365" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24369", "url": "https://access.redhat.com/errata/RHSA-2026:24369" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-42959", "url": "https://access.redhat.com/security/cve/CVE-2026-42959" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2479806", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479806" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42959.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42959.json" } ], "release_date": "2026-05-20T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2019-25042", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2019-25042" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html" }, { "category": "external", "summary": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/", "url": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210507-0007/", "url": "https://security.netapp.com/advisory/ntap-20210507-0007/" } ], "release_date": "2021-04-27T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2022-3204", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for a record that relies on those unresponsive nameservers. The attack can cause a resolver to spend a lot of time/resources resolving records under a malicious delegation point where a considerable number of unresponsive NS records reside. It can trigger high CPU usage in some resolver implementations that continually look in the cache for resolved NS records in that delegation. This can lead to degraded performance and eventually denial of service in orchestrated attacks. Unbound does not suffer from high CPU usage, but resources are still needed for resolving the malicious delegation. Unbound will keep trying to resolve the record until hard limits are reached. Based on the nature of the attack and the replies, different limits could be reached. From version 1.16.3 on, Unbound introduces fixes for better performance when under load, by cutting opportunistic queries for nameserver discovery and DNSKEY prefetching and limiting the number of times a delegation point can issue a cache lookup for missing records.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-3204" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/03/msg00024.html", "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00024.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35QGS5FBQTG3DBSK7QV67PA64P24ABHY/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35QGS5FBQTG3DBSK7QV67PA64P24ABHY/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3G2HS6CYPSIGAKO6QLEZPG3RD6AMPB7B/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3G2HS6CYPSIGAKO6QLEZPG3RD6AMPB7B/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4EU6DMJXQFMAIE6SLAH4H5RNRU6VQL/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4EU6DMJXQFMAIE6SLAH4H5RNRU6VQL/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202212-02", "url": "https://security.gentoo.org/glsa/202212-02" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt" } ], "release_date": "2022-09-26T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2019-25033", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2019-25033" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html" }, { "category": "external", "summary": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/", "url": "https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20210507-0007/", "url": "https://security.netapp.com/advisory/ntap-20210507-0007/" } ], "release_date": "2021-04-27T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-81634", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a malicious name server or tampering with an incoming response to Unbound (canonicalisation happens before DNSSEC validation), can trigger the vulnerability.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-81634" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-81634.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-81634.txt" } ], "release_date": "2026-09-16T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-81642", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerability by controlling a malicious zone and querying a vulnerable Unbound.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-81642" } ], "release_date": "2026-09-16T09:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-28T06:18:03.894941Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1793168282" } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }