tocsin

Debian/unbound: unknown

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS

Action: Upgrade unbound to 1.17.1-2+deb12u3 or later.

Affected

introducedfixedlast affected
01.17.1-2+deb12u3-

Fixed versions

1.17.1-2+deb12u3

Sources

published · modified · JSON