tocsin

Alpine/unbound: high 7.5

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache

Action: Upgrade unbound to 1.25.2-r0 or later.

Affected

introducedfixedlast affected
1.7.01.25.2-r0-

Fixed versions

1.25.2-r0

Sources

published · modified · JSON