CVE-2024-8508

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-8508
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-8508.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-8508
Related
Published
2024-10-03T17:15:15Z
Modified
2025-01-08T16:23:20.878986Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventually denial of service in well orchestrated attacks. The vulnerability can be exploited by a malicious actor querying Unbound for the specially crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will try to apply name compression which was an unbounded operation that could lock the CPU until the whole packet was complete. Unbound version 1.21.1 introduces a hard limit on the number of name compression calculations it is willing to do per packet. Packets that need more compression will result in semi-compressed packets or truncated packets, even on TCP for huge messages, to avoid locking the CPU for long. This change should not affect normal DNS traffic.

References

Affected packages

Alpine:v3.17 / unbound

Package

Name
unbound
Purl
pkg:apk/alpine/unbound?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.0-r1

Affected versions

1.*

1.4.10-r0
1.4.10-r1
1.4.10-r2
1.4.10-r3
1.4.13-r0
1.4.13-r1
1.4.13-r2
1.4.13-r3
1.4.14-r0
1.4.15-r0
1.4.16-r0
1.4.17-r0
1.4.18-r0
1.4.19-r0
1.4.19-r1
1.4.19-r2
1.4.20-r0
1.4.20-r1
1.4.20-r2
1.4.21-r0
1.4.21-r1
1.4.21-r2
1.4.22-r0
1.4.22-r1
1.5.1-r0
1.5.2-r0
1.5.2-r1
1.5.3-r0
1.5.4-r0
1.5.6-r0
1.5.6-r1
1.5.6-r2
1.5.6-r3
1.5.6-r4
1.5.7-r0
1.5.7-r1
1.5.8-r0
1.5.8-r1
1.5.9-r0
1.5.9-r1
1.5.10-r0
1.5.10-r1
1.5.10-r2
1.6.0-r0
1.6.0-r1
1.6.1-r0
1.6.1-r1
1.6.2-r0
1.6.3-r0
1.6.4-r0
1.6.5-r0
1.6.6-r0
1.6.7-r0
1.6.7-r1
1.6.7-r2
1.6.8-r0
1.7.0-r0
1.7.0-r1
1.7.0-r2
1.7.1-r0
1.7.3-r0
1.8.0-r0
1.8.1-r0
1.8.1-r1
1.8.3-r0
1.9.0-r0
1.9.1-r0
1.9.1-r1
1.9.1-r2
1.9.2-r0
1.9.2-r1
1.9.3-r0
1.9.4-r0
1.9.4-r1
1.9.5-r0
1.9.5-r1
1.9.5-r2
1.9.5-r3
1.9.6-r0
1.10.0-r0
1.10.1-r0
1.10.1-r1
1.11.0-r0
1.12.0-r0
1.13.0-r0
1.13.0-r1
1.13.0-r2
1.13.0-r3
1.13.1-r0
1.13.1-r1
1.13.1-r2
1.13.2-r0
1.13.2-r1
1.13.2-r2
1.14.0-r0
1.14.0-r1
1.15.0-r0
1.16.0-r0
1.16.0-r1
1.16.1-r0
1.16.2-r0
1.16.2-r1
1.16.3-r0
1.17.0-r0
1.17.1-r0
1.19.1-r0
1.19.2-r0
1.19.3-r0
1.20.0-r0

Alpine:v3.18 / unbound

Package

Name
unbound
Purl
pkg:apk/alpine/unbound?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.0-r1

Affected versions

1.*

1.4.10-r0
1.4.10-r1
1.4.10-r2
1.4.10-r3
1.4.13-r0
1.4.13-r1
1.4.13-r2
1.4.13-r3
1.4.14-r0
1.4.15-r0
1.4.16-r0
1.4.17-r0
1.4.18-r0
1.4.19-r0
1.4.19-r1
1.4.19-r2
1.4.20-r0
1.4.20-r1
1.4.20-r2
1.4.21-r0
1.4.21-r1
1.4.21-r2
1.4.22-r0
1.4.22-r1
1.5.1-r0
1.5.2-r0
1.5.2-r1
1.5.3-r0
1.5.4-r0
1.5.6-r0
1.5.6-r1
1.5.6-r2
1.5.6-r3
1.5.6-r4
1.5.7-r0
1.5.7-r1
1.5.8-r0
1.5.8-r1
1.5.9-r0
1.5.9-r1
1.5.10-r0
1.5.10-r1
1.5.10-r2
1.6.0-r0
1.6.0-r1
1.6.1-r0
1.6.1-r1
1.6.2-r0
1.6.3-r0
1.6.4-r0
1.6.5-r0
1.6.6-r0
1.6.7-r0
1.6.7-r1
1.6.7-r2
1.6.8-r0
1.7.0-r0
1.7.0-r1
1.7.0-r2
1.7.1-r0
1.7.3-r0
1.8.0-r0
1.8.1-r0
1.8.1-r1
1.8.3-r0
1.9.0-r0
1.9.1-r0
1.9.1-r1
1.9.1-r2
1.9.2-r0
1.9.2-r1
1.9.3-r0
1.9.4-r0
1.9.4-r1
1.9.5-r0
1.9.5-r1
1.9.5-r2
1.9.5-r3
1.9.6-r0
1.10.0-r0
1.10.1-r0
1.10.1-r1
1.11.0-r0
1.12.0-r0
1.13.0-r0
1.13.0-r1
1.13.0-r2
1.13.0-r3
1.13.1-r0
1.13.1-r1
1.13.1-r2
1.13.2-r0
1.13.2-r1
1.13.2-r2
1.14.0-r0
1.14.0-r1
1.15.0-r0
1.16.0-r0
1.16.0-r1
1.16.1-r0
1.16.2-r0
1.16.2-r1
1.16.3-r0
1.17.0-r0
1.17.0-r1
1.17.1-r0
1.17.1-r1
1.19.1-r0
1.19.2-r0
1.19.3-r0
1.20.0-r0

Alpine:v3.19 / unbound

Package

Name
unbound
Purl
pkg:apk/alpine/unbound?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.0-r1

Affected versions

1.*

1.4.10-r0
1.4.10-r1
1.4.10-r2
1.4.10-r3
1.4.13-r0
1.4.13-r1
1.4.13-r2
1.4.13-r3
1.4.14-r0
1.4.15-r0
1.4.16-r0
1.4.17-r0
1.4.18-r0
1.4.19-r0
1.4.19-r1
1.4.19-r2
1.4.20-r0
1.4.20-r1
1.4.20-r2
1.4.21-r0
1.4.21-r1
1.4.21-r2
1.4.22-r0
1.4.22-r1
1.5.1-r0
1.5.2-r0
1.5.2-r1
1.5.3-r0
1.5.4-r0
1.5.6-r0
1.5.6-r1
1.5.6-r2
1.5.6-r3
1.5.6-r4
1.5.7-r0
1.5.7-r1
1.5.8-r0
1.5.8-r1
1.5.9-r0
1.5.9-r1
1.5.10-r0
1.5.10-r1
1.5.10-r2
1.6.0-r0
1.6.0-r1
1.6.1-r0
1.6.1-r1
1.6.2-r0
1.6.3-r0
1.6.4-r0
1.6.5-r0
1.6.6-r0
1.6.7-r0
1.6.7-r1
1.6.7-r2
1.6.8-r0
1.7.0-r0
1.7.0-r1
1.7.0-r2
1.7.1-r0
1.7.3-r0
1.8.0-r0
1.8.1-r0
1.8.1-r1
1.8.3-r0
1.9.0-r0
1.9.1-r0
1.9.1-r1
1.9.1-r2
1.9.2-r0
1.9.2-r1
1.9.3-r0
1.9.4-r0
1.9.4-r1
1.9.5-r0
1.9.5-r1
1.9.5-r2
1.9.5-r3
1.9.6-r0
1.10.0-r0
1.10.1-r0
1.10.1-r1
1.11.0-r0
1.12.0-r0
1.13.0-r0
1.13.0-r1
1.13.0-r2
1.13.0-r3
1.13.1-r0
1.13.1-r1
1.13.1-r2
1.13.2-r0
1.13.2-r1
1.13.2-r2
1.14.0-r0
1.14.0-r1
1.15.0-r0
1.16.0-r0
1.16.0-r1
1.16.1-r0
1.16.2-r0
1.16.2-r1
1.16.3-r0
1.17.0-r0
1.17.0-r1
1.17.1-r0
1.17.1-r1
1.17.1-r2
1.17.1-r3
1.17.1-r4
1.18.0-r0
1.19.0-r0
1.19.1-r0
1.19.2-r0
1.19.3-r0
1.20.0-r0

Alpine:v3.20 / unbound

Package

Name
unbound
Purl
pkg:apk/alpine/unbound?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.0-r1

Affected versions

1.*

1.4.10-r0
1.4.10-r1
1.4.10-r2
1.4.10-r3
1.4.13-r0
1.4.13-r1
1.4.13-r2
1.4.13-r3
1.4.14-r0
1.4.15-r0
1.4.16-r0
1.4.17-r0
1.4.18-r0
1.4.19-r0
1.4.19-r1
1.4.19-r2
1.4.20-r0
1.4.20-r1
1.4.20-r2
1.4.21-r0
1.4.21-r1
1.4.21-r2
1.4.22-r0
1.4.22-r1
1.5.1-r0
1.5.2-r0
1.5.2-r1
1.5.3-r0
1.5.4-r0
1.5.6-r0
1.5.6-r1
1.5.6-r2
1.5.6-r3
1.5.6-r4
1.5.7-r0
1.5.7-r1
1.5.8-r0
1.5.8-r1
1.5.9-r0
1.5.9-r1
1.5.10-r0
1.5.10-r1
1.5.10-r2
1.6.0-r0
1.6.0-r1
1.6.1-r0
1.6.1-r1
1.6.2-r0
1.6.3-r0
1.6.4-r0
1.6.5-r0
1.6.6-r0
1.6.7-r0
1.6.7-r1
1.6.7-r2
1.6.8-r0
1.7.0-r0
1.7.0-r1
1.7.0-r2
1.7.1-r0
1.7.3-r0
1.8.0-r0
1.8.1-r0
1.8.1-r1
1.8.3-r0
1.9.0-r0
1.9.1-r0
1.9.1-r1
1.9.1-r2
1.9.2-r0
1.9.2-r1
1.9.3-r0
1.9.4-r0
1.9.4-r1
1.9.5-r0
1.9.5-r1
1.9.5-r2
1.9.5-r3
1.9.6-r0
1.10.0-r0
1.10.1-r0
1.10.1-r1
1.11.0-r0
1.12.0-r0
1.13.0-r0
1.13.0-r1
1.13.0-r2
1.13.0-r3
1.13.1-r0
1.13.1-r1
1.13.1-r2
1.13.2-r0
1.13.2-r1
1.13.2-r2
1.14.0-r0
1.14.0-r1
1.15.0-r0
1.16.0-r0
1.16.0-r1
1.16.1-r0
1.16.2-r0
1.16.2-r1
1.16.3-r0
1.17.0-r0
1.17.0-r1
1.17.1-r0
1.17.1-r1
1.17.1-r2
1.17.1-r3
1.17.1-r4
1.18.0-r0
1.19.0-r0
1.19.1-r0
1.19.2-r0
1.19.3-r0
1.19.3-r1
1.19.3-r2
1.20.0-r0

Alpine:v3.21 / unbound

Package

Name
unbound
Purl
pkg:apk/alpine/unbound?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.21.1-r0

Affected versions

1.*

1.4.10-r0
1.4.10-r1
1.4.10-r2
1.4.10-r3
1.4.13-r0
1.4.13-r1
1.4.13-r2
1.4.13-r3
1.4.14-r0
1.4.15-r0
1.4.16-r0
1.4.17-r0
1.4.18-r0
1.4.19-r0
1.4.19-r1
1.4.19-r2
1.4.20-r0
1.4.20-r1
1.4.20-r2
1.4.21-r0
1.4.21-r1
1.4.21-r2
1.4.22-r0
1.4.22-r1
1.5.1-r0
1.5.2-r0
1.5.2-r1
1.5.3-r0
1.5.4-r0
1.5.6-r0
1.5.6-r1
1.5.6-r2
1.5.6-r3
1.5.6-r4
1.5.7-r0
1.5.7-r1
1.5.8-r0
1.5.8-r1
1.5.9-r0
1.5.9-r1
1.5.10-r0
1.5.10-r1
1.5.10-r2
1.6.0-r0
1.6.0-r1
1.6.1-r0
1.6.1-r1
1.6.2-r0
1.6.3-r0
1.6.4-r0
1.6.5-r0
1.6.6-r0
1.6.7-r0
1.6.7-r1
1.6.7-r2
1.6.8-r0
1.7.0-r0
1.7.0-r1
1.7.0-r2
1.7.1-r0
1.7.3-r0
1.8.0-r0
1.8.1-r0
1.8.1-r1
1.8.3-r0
1.9.0-r0
1.9.1-r0
1.9.1-r1
1.9.1-r2
1.9.2-r0
1.9.2-r1
1.9.3-r0
1.9.4-r0
1.9.4-r1
1.9.5-r0
1.9.5-r1
1.9.5-r2
1.9.5-r3
1.9.6-r0
1.10.0-r0
1.10.1-r0
1.10.1-r1
1.11.0-r0
1.12.0-r0
1.13.0-r0
1.13.0-r1
1.13.0-r2
1.13.0-r3
1.13.1-r0
1.13.1-r1
1.13.1-r2
1.13.2-r0
1.13.2-r1
1.13.2-r2
1.14.0-r0
1.14.0-r1
1.15.0-r0
1.16.0-r0
1.16.0-r1
1.16.1-r0
1.16.2-r0
1.16.2-r1
1.16.3-r0
1.17.0-r0
1.17.0-r1
1.17.1-r0
1.17.1-r1
1.17.1-r2
1.17.1-r3
1.17.1-r4
1.18.0-r0
1.19.0-r0
1.19.1-r0
1.19.2-r0
1.19.3-r0
1.19.3-r1
1.19.3-r2
1.20.0-r0
1.20.0-r1
1.20.0-r2
1.21.0-r0

Debian:11 / unbound

Package

Name
unbound
Purl
pkg:deb/debian/unbound?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.13.1-1+deb11u4

Affected versions

1.*

1.13.1-1
1.13.1-1+deb11u1
1.13.1-1+deb11u2
1.13.1-1+deb11u3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / unbound

Package

Name
unbound
Purl
pkg:deb/debian/unbound?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.17.1-2
1.17.1-2+deb12u1
1.17.1-2+deb12u2
1.17.1-2+loong64
1.18.0-1
1.18.0-2
1.19.1-1
1.19.2-1
1.20.0-1
1.21.1-1
1.22.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / unbound

Package

Name
unbound
Purl
pkg:deb/debian/unbound?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.21.1-1

Affected versions

1.*

1.17.1-2
1.17.1-2+loong64
1.18.0-1
1.18.0-2
1.19.1-1
1.19.2-1
1.20.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/nlnetlabs/unbound

Affected ranges

Type
GIT
Repo
https://github.com/nlnetlabs/unbound
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b7c61d7cc256d6a174e6179622c7fa968272c259

Affected versions

Other

final-svn-state

release-0.*

release-0.0
release-0.1
release-0.10
release-0.11
release-0.3
release-0.4
release-0.5
release-0.6
release-0.7
release-0.8

release-1.*

release-1.0.1
release-1.1.1
release-1.10.0rc1
release-1.10.0rc2
release-1.11.0
release-1.11.0rc1
release-1.12.0
release-1.12.0rc1
release-1.13.0rc1
release-1.13.0rc2
release-1.13.0rc3
release-1.13.0rc4
release-1.13.1
release-1.13.1rc1
release-1.13.1rc2
release-1.13.2
release-1.13.2rc1
release-1.14.0
release-1.14.0rc1
release-1.15.0
release-1.15.0rc1
release-1.16.0
release-1.16.0rc1
release-1.16.1
release-1.16.1rc1
release-1.16.2
release-1.16.3
release-1.17.0
release-1.17.0rc1
release-1.17.1
release-1.17.1rc1
release-1.17.1rc2
release-1.18.0
release-1.18.0rc1
release-1.19.0
release-1.19.0rc1
release-1.19.3rc1
release-1.20.0
release-1.20.0rc1
release-1.21.0
release-1.21.0rc1
release-1.3.1
release-1.3.2
release-1.3.3
release-1.3.3rc1
release-1.4.0
release-1.4.0rc1
release-1.4.1
release-1.4.11
release-1.4.11rc1
release-1.4.11rc2
release-1.4.11rc3
release-1.4.12rc1
release-1.4.13
release-1.4.13rc1
release-1.4.13rc2
release-1.4.14
release-1.4.14rc1
release-1.4.17
release-1.4.17rc1
release-1.4.18rc1
release-1.4.18rc2
release-1.4.19
release-1.4.19rc1
release-1.4.2
release-1.4.20
release-1.4.22
release-1.4.22rc1
release-1.4.3
release-1.4.4
release-1.4.4rc1
release-1.4.5
release-1.4.5rc1
release-1.4.6
release-1.4.6rc1
release-1.4.7
release-1.4.7rc1
release-1.4.8rc1
release-1.4.9
release-1.4.9rc1
release-1.5.0rc1
release-1.5.1
release-1.5.10
release-1.5.10rc1
release-1.5.1rc1
release-1.5.1rc2
release-1.5.2
release-1.5.2rc1
release-1.5.3rc1
release-1.5.4
release-1.5.4rc1
release-1.5.5
release-1.5.5rc1
release-1.5.6
release-1.5.6rc1
release-1.5.7
release-1.5.8
release-1.5.8rc1
release-1.5.9rc1
release-1.6.0rc1
release-1.6.1rc1
release-1.6.1rc2
release-1.6.1rc3
release-1.6.2rc1
release-1.6.4rc1
release-1.6.4rc2
release-1.6.6rc1
release-1.6.6rc2
release-1.6.7
release-1.6.7rc1
release-1.7.0rc1
release-1.7.0rc2
release-1.7.0rc3
release-1.7.1rc1
release-1.7.2rc1
release-1.7.3rc1
release-1.8.0rc1
release-1.8.1rc1
release-1.8.2rc1
release-1.9.0rc1
release-1.9.1rc1
release-1.9.2
release-1.9.2rc1
release-1.9.2rc2
release-1.9.2rc3
release-1.9.3
release-1.9.3rc1
release-1.9.3rc2
release-1.9.4
release-1.9.6
release-1.9.6rc1