ISOMAN

CVE

CVE-2020-12662

Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00067.html
  2. http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00069.html
  3. http://www.nxnsattack.com
  4. http://www.openwall.com/lists/oss-security/2020/05/19/5
  5. https://lists.debian.org/debian-lts-announce/2021/02/msg00017.html
  6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F5NFROI2OMCZLYRTCNGHGO3TUD32LCIQ/
  7. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJ42N2HBZ3DXMSEC56SWIIOFQGOS5M7I/
  8. https://nlnetlabs.nl/downloads/unbound/CVE-2020-12662_2020-12663.txt
  9. https://security.FreeBSD.org/advisories/FreeBSD-SA-20:19.unbound.asc
  10. https://security.netapp.com/advisory/ntap-20200702-0006/
  11. https://usn.ubuntu.com/4374-1/
  12. https://www.debian.org/security/2020/dsa-4694
  13. https://www.synology.com/security/advisory/Synology_SA_20_12
  14. http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00067.html
  15. http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00069.html
  16. http://www.nxnsattack.com
  17. http://www.openwall.com/lists/oss-security/2020/05/19/5
  18. https://lists.debian.org/debian-lts-announce/2021/02/msg00017.html
  19. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F5NFROI2OMCZLYRTCNGHGO3TUD32LCIQ/
  20. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJ42N2HBZ3DXMSEC56SWIIOFQGOS5M7I/