RHSA-2026:20357
Vulnerability from csaf_redhat - Published: 2026-05-23 20:39 - Updated: 2026-05-28 02:54Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Moderate
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
unbound:
* python3-unbound-1.25.1-1.hum1 (aarch64, x86_64)
* unbound-1.25.1-1.hum1 (aarch64, x86_64)
* unbound-anchor-1.25.1-1.hum1 (aarch64, x86_64)
* unbound-devel-1.25.1-1.hum1 (aarch64, x86_64)
* unbound-dracut-1.25.1-1.hum1 (aarch64, x86_64)
* unbound-libs-1.25.1-1.hum1 (aarch64, x86_64)
* unbound-munin-1.25.1-1.hum1 (noarch)
* unbound-utils-1.25.1-1.hum1 (aarch64, x86_64)
* unbound-1.25.1-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Unbound. A remote attacker can exploit this vulnerability by sending a specially crafted DNSCrypt query. This malicious query, when processed, causes Unbound to read beyond its allocated memory, leading to a heap overflow. This can result in a denial of service (DoS) by crashing the Unbound service.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:unbound-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Unbound's DNSSEC validator where the code path for consulting the negative cache for DS records does not honor the limit on NSEC3 hash calculations introduced in version 1.19.1. An adversary who controls a DNSSEC-signed zone can sign NSEC3 records with high iteration counts for child delegations, causing Unbound to perform excessive hash computations while holding a global lock on the negative cache. This temporarily blocks other resolver threads from accessing the negative cache, leading to degraded DNS resolution performance for the duration of the attack.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:unbound-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Unbound's handling of DNS reply messages, complementing the earlier CVE-2025-11411 fix. Unbound accepts and caches address records from the additional section of DNS replies when they accompany authority section RRSets other than NS (such as MX records). A malicious actor who can inject crafted DNS responses—via packet spoofing or fragmentation attacks—can exploit this to poison Unbound's cache with attacker-controlled address records, potentially redirecting DNS resolution for affected domains.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:unbound-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:unbound-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
19 references
Acknowledgments
Peking University
TaoFei Guo
Tsinghua University
Yang Luo
JianJun Chen
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nunbound:\n * python3-unbound-1.25.1-1.hum1 (aarch64, x86_64)\n * unbound-1.25.1-1.hum1 (aarch64, x86_64)\n * unbound-anchor-1.25.1-1.hum1 (aarch64, x86_64)\n * unbound-devel-1.25.1-1.hum1 (aarch64, x86_64)\n * unbound-dracut-1.25.1-1.hum1 (aarch64, x86_64)\n * unbound-libs-1.25.1-1.hum1 (aarch64, x86_64)\n * unbound-munin-1.25.1-1.hum1 (noarch)\n * unbound-utils-1.25.1-1.hum1 (aarch64, x86_64)\n * unbound-1.25.1-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20357",
"url": "https://access.redhat.com/errata/RHSA-2026:20357"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32792",
"url": "https://access.redhat.com/security/cve/CVE-2026-32792"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42960",
"url": "https://access.redhat.com/security/cve/CVE-2026-42960"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42923",
"url": "https://access.redhat.com/security/cve/CVE-2026-42923"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20357.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-05-28T02:54:11+00:00",
"generator": {
"date": "2026-05-28T02:54:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2026:20357",
"initial_release_date": "2026-05-23T20:39:46+00:00",
"revision_history": [
{
"date": "2026-05-23T20:39:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-26T14:45:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-28T02:54:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "unbound-main@aarch64",
"product": {
"name": "unbound-main@aarch64",
"product_id": "unbound-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-unbound@1.25.1-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "unbound-main@x86_64",
"product": {
"name": "unbound-main@x86_64",
"product_id": "unbound-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-unbound@1.25.1-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "unbound-main@src",
"product": {
"name": "unbound-main@src",
"product_id": "unbound-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/unbound@1.25.1-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "unbound-main@noarch",
"product": {
"name": "unbound-main@noarch",
"product_id": "unbound-main@noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/unbound-munin@1.25.1-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:unbound-main@aarch64"
},
"product_reference": "unbound-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-main@noarch as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:unbound-main@noarch"
},
"product_reference": "unbound-main@noarch",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:unbound-main@src"
},
"product_reference": "unbound-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "unbound-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:unbound-main@x86_64"
},
"product_reference": "unbound-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-32792",
"discovery_date": "2026-05-19T10:24:01.587000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479779"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Unbound. A remote attacker can exploit this vulnerability by sending a specially crafted DNSCrypt query. This malicious query, when processed, causes Unbound to read beyond its allocated memory, leading to a heap overflow. This can result in a denial of service (DoS) by crashing the Unbound service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "unbound: Packet of death with DNSCrypt",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service vulnerability affects Unbound instances compiled with DNSCrypt support. A specially crafted DNSCrypt query could lead to a heap overflow and service crash. However, the likelihood of a crash is low due to reliance on specific memory layouts and subsequent packet checks that may prevent successful exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32792"
},
{
"category": "external",
"summary": "RHBZ#2479779",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479779"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32792",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32792"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32792",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32792"
}
],
"release_date": "2026-05-26T03:43:23.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-23T20:39:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20357"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "unbound: Packet of death with DNSCrypt"
},
{
"cve": "CVE-2026-42923",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-05-19T12:26:23.936000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Unbound\u0027s DNSSEC validator where the code path for consulting the negative cache for DS records does not honor the limit on NSEC3 hash calculations introduced in version 1.19.1. An adversary who controls a DNSSEC-signed zone can sign NSEC3 records with high iteration counts for child delegations, causing Unbound to perform excessive hash computations while holding a global lock on the negative cache. This temporarily blocks other resolver threads from accessing the negative cache, leading to degraded DNS resolution performance for the duration of the attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate. The flaw can be remotely triggered without authentication, but the impact is limited to service degradation rather than a full denial-of-service.The Unbound process does not crash,a global negative cache lock is held during excessive NSEC3 hash computations, temporarily blocking other resolver threads. The root cause is a negative cache code path that bypasses the existing NSEC3 hash computation limits.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42923"
},
{
"category": "external",
"summary": "RHBZ#2479825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42923",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42923"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42923",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42923"
}
],
"release_date": "2026-05-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-23T20:39:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20357"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS"
},
{
"acknowledgments": [
{
"names": [
"TaoFei Guo"
],
"organization": "Peking University"
},
{
"names": [
"Yang Luo",
"JianJun Chen"
],
"organization": "Tsinghua University"
}
],
"cve": "CVE-2026-42960",
"cwe": {
"id": "CWE-349",
"name": "Acceptance of Extraneous Untrusted Data With Trusted Data"
},
"discovery_date": "2026-05-19T12:09:50.308000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479821"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Unbound\u0027s handling of DNS reply messages, complementing the earlier CVE-2025-11411 fix. Unbound accepts and caches address records from the additional section of DNS replies when they accompany authority section RRSets other than NS (such as MX records). A malicious actor who can inject crafted DNS responses\u2014via packet spoofing or fragmentation attacks\u2014can exploit this to poison Unbound\u0027s cache with attacker-controlled address records, potentially redirecting DNS resolution for affected domains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate. Exploitation requires the attacker to successfully inject or spoof DNS response packets, which increases attack complexity. However, successful exploitation can result in DNS cache poisoning, allowing the attacker to redirect DNS resolution for affected domains.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42960"
},
{
"category": "external",
"summary": "RHBZ#2479821",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479821"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42960"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42960",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42960"
}
],
"release_date": "2026-05-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-23T20:39:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20357"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:unbound-main@aarch64",
"Red Hat Hardened Images:unbound-main@noarch",
"Red Hat Hardened Images:unbound-main@src",
"Red Hat Hardened Images:unbound-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…