{ "document": { "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux6els/vex/2026/cve-2026-46582-els_os-oraclelinux6els.json" } ], "tracking": { "current_release_date": "2026-10-28T11:32:51Z", "generator": { "date": "2026-10-28T11:32:51Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2026-46582-ELS_OS-ORACLELINUX6ELS", "initial_release_date": "2026-07-22T14:17:00Z", "revision_history": [ { "date": "2026-07-22T14:17:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-28T11:32:51Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2026-46582" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 6", "product": { "name": "Oracle Linux 6", "product_id": "Oracle-Linux-6", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" }, { "branches": [ { "category": "product_version", "name": "unbound-0:1.4.20-29.el6_10.1.i686", "product": { "name": "unbound-0:1.4.20-29.el6_10.1.i686", "product_id": "unbound-0:1.4.20-29.el6_10.1.i686", "product_identification_helper": { "purl": "pkg:rpm/oracle/unbound@1.4.20-29.el6_10.1?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.4.20-29.el6_10.1.i686", "product": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.i686", "product_id": "unbound-libs-0:1.4.20-29.el6_10.1.i686", "product_identification_helper": { "purl": "pkg:rpm/oracle/unbound-libs@1.4.20-29.el6_10.1?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.4.20-29.el6_10.1.i686", "product": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.i686", "product_id": "unbound-devel-0:1.4.20-29.el6_10.1.i686", "product_identification_helper": { "purl": "pkg:rpm/oracle/unbound-devel@1.4.20-29.el6_10.1?arch=i686" } } }, { "category": "product_version", "name": "unbound-python-0:1.4.20-29.el6_10.1.i686", "product": { "name": "unbound-python-0:1.4.20-29.el6_10.1.i686", "product_id": "unbound-python-0:1.4.20-29.el6_10.1.i686", "product_identification_helper": { "purl": "pkg:rpm/oracle/unbound-python@1.4.20-29.el6_10.1?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "unbound-0:1.4.20-29.el6_10.1.x86_64", "product": { "name": "unbound-0:1.4.20-29.el6_10.1.x86_64", "product_id": "unbound-0:1.4.20-29.el6_10.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/unbound@1.4.20-29.el6_10.1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.4.20-29.el6_10.1.x86_64", "product": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.x86_64", "product_id": "unbound-libs-0:1.4.20-29.el6_10.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/unbound-libs@1.4.20-29.el6_10.1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.4.20-29.el6_10.1.x86_64", "product": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.x86_64", "product_id": "unbound-devel-0:1.4.20-29.el6_10.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/unbound-devel@1.4.20-29.el6_10.1?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-python-0:1.4.20-29.el6_10.1.x86_64", "product": { "name": "unbound-python-0:1.4.20-29.el6_10.1.x86_64", "product_id": "unbound-python-0:1.4.20-29.el6_10.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/unbound-python@1.4.20-29.el6_10.1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product": { "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_id": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound@1.4.20-29.el6_10.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_id": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-libs@1.4.20-29.el6_10.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_id": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-devel@1.4.20-29.el6_10.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product": { "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_id": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-python@1.4.20-29.el6_10.1.tuxcare.els2?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product": { "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_id": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound@1.4.20-29.el6_10.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_id": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-libs@1.4.20-29.el6_10.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_id": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-devel@1.4.20-29.el6_10.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product": { "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_id": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/unbound-python@1.4.20-29.el6_10.1.tuxcare.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686" }, "product_reference": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.4.20-29.el6_10.1.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.i686" }, "product_reference": "unbound-0:1.4.20-29.el6_10.1.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-0:1.4.20-29.el6_10.1.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.x86_64" }, "product_reference": "unbound-0:1.4.20-29.el6_10.1.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.x86_64" }, "product_reference": "unbound-libs-0:1.4.20-29.el6_10.1.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686" }, "product_reference": "unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-libs-0:1.4.20-29.el6_10.1.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.i686" }, "product_reference": "unbound-libs-0:1.4.20-29.el6_10.1.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686" }, "product_reference": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.i686" }, "product_reference": "unbound-devel-0:1.4.20-29.el6_10.1.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-devel-0:1.4.20-29.el6_10.1.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.x86_64" }, "product_reference": "unbound-devel-0:1.4.20-29.el6_10.1.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64" }, "product_reference": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-python-0:1.4.20-29.el6_10.1.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.x86_64" }, "product_reference": "unbound-python-0:1.4.20-29.el6_10.1.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686" }, "product_reference": "unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "unbound-python-0:1.4.20-29.el6_10.1.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.i686" }, "product_reference": "unbound-python-0:1.4.20-29.el6_10.1.i686", "relates_to_product_reference": "Oracle-Linux-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-46582", "cwe": { "id": "CWE-358", "name": "Improperly Implemented Security Check for Standard" }, "notes": [ { "category": "description", "text": "In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolving thread puts secure on the rrset, and another thread that is on the serve expired path then picks up the updated rrset contents with the secure status for a reply, it can be used to change a specific record, next to a wildcard that could be covered by the wildcard, into the wildcard. A malicious actor can exploit the possible poisonous effect by having any DNSSEC-singed domain (irrelevant to the victim domain) and a CNAME wrapper record that points to a record next to a wildcard (that could be covered by the wildcard). Then quering Unbound for the wildcard sibling record would seed the secure message. A later (after expiry) query for the CNAME wrapper would need to resolve the target sibling record. If the wildcard replay is injected into the response, the wildcard rrset will update the expired sibling record with a secure status before completing proper wildcard validation with NSEC records and eventually treating the CNAME wrapper answer as bogus. The updated poisoned rrset is now secure and points to the wildcard. This vulnerability is explicit for the serve expired path and needs injection of the signed wildcard rrset without the NSEC accompanying rrset.", "title": "Vulnerability description" } ], "product_status": { "known_affected": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-46582" }, { "category": "external", "summary": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-46582.txt", "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-46582.txt" } ], "release_date": "2026-07-22T14:17:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-10-25T11:17:45.620013Z", "details": "This vulnerability is only reachable in Unbound 1.6.0–1.25.1 when the optional serve-expired code path is in use; exploiting it requires precise injection of a DNSSEC‑signed wildcard RRset without accompanying NSEC data during a brief post‑expiry race, which is a high‑complexity, network‑only attack with no required privileges or user interaction. Even if hit, the effect is a short‑lived integrity issue confined to a specific sibling record (no confidentiality or availability impact), and subsequent validation marks the response bogus, limiting persistence and blast radius. Given these narrow preconditions and limited impact, this is a low‑priority item for typical enterprise resolver deployments.", "product_ids": [ "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-0:1.4.20-29.el6_10.1.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-devel-0:1.4.20-29.el6_10.1.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-libs-0:1.4.20-29.el6_10.1.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.i686", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.tuxcare.els2.x86_64", "Oracle-Linux-6:unbound-python-0:1.4.20-29.el6_10.1.x86_64" ] } ] } ] }