tocsin

Alpine/unbound: medium 5.3

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses

Action: Upgrade unbound to 1.20.0-r1 or later.

Affected

introducedfixedlast affected
01.20.0-r1-

Fixed versions

1.20.0-r1

Sources

published · modified · JSON