OESA-2024-2266

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2266

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-2266.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2024-2266

Upstream

CVE-2024-8508

Published

2024-10-18T11:09:23Z

Modified

2025-08-12T05:48:21.026233Z

Summary

unbound security update

Details

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn't make custom builds or provide specific features to paying customers only.

Security Fix(es):

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventually denial of service in well orchestrated attacks. The vulnerability can be exploited by a malicious actor querying Unbound for the specially crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will try to apply name compression which was an unbounded operation that could lock the CPU until the whole packet was complete. Unbound version 1.21.1 introduces a hard limit on the number of name compression calculations it is willing to do per packet. Packets that need more compression will result in semi-compressed packets or truncated packets, even on TCP for huge messages, to avoid locking the CPU for long. This change should not affect normal DNS traffic.(CVE-2024-8508)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:22.03-LTS-SP1 / unbound

Package

Name: unbound
Purl: pkg:rpm/openEuler/unbound&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.13.2-15.oe2203sp1

Ecosystem specific

{
    "src": [
        "unbound-1.13.2-15.oe2203sp1.src.rpm"
    ],
    "aarch64": [
        "python3-unbound-1.13.2-15.oe2203sp1.aarch64.rpm",
        "unbound-1.13.2-15.oe2203sp1.aarch64.rpm",
        "unbound-debuginfo-1.13.2-15.oe2203sp1.aarch64.rpm",
        "unbound-debugsource-1.13.2-15.oe2203sp1.aarch64.rpm",
        "unbound-devel-1.13.2-15.oe2203sp1.aarch64.rpm",
        "unbound-help-1.13.2-15.oe2203sp1.aarch64.rpm",
        "unbound-libs-1.13.2-15.oe2203sp1.aarch64.rpm"
    ],
    "x86_64": [
        "python3-unbound-1.13.2-15.oe2203sp1.x86_64.rpm",
        "unbound-1.13.2-15.oe2203sp1.x86_64.rpm",
        "unbound-debuginfo-1.13.2-15.oe2203sp1.x86_64.rpm",
        "unbound-debugsource-1.13.2-15.oe2203sp1.x86_64.rpm",
        "unbound-devel-1.13.2-15.oe2203sp1.x86_64.rpm",
        "unbound-help-1.13.2-15.oe2203sp1.x86_64.rpm",
        "unbound-libs-1.13.2-15.oe2203sp1.x86_64.rpm"
    ]
}

openEuler:24.03-LTS / unbound

Package

Name: unbound
Purl: pkg:rpm/openEuler/unbound&distro=openEuler-24.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.17.1-10.oe2403

Ecosystem specific

{
    "src": [
        "unbound-1.17.1-10.oe2403.src.rpm"
    ],
    "aarch64": [
        "python3-unbound-1.17.1-10.oe2403.aarch64.rpm",
        "unbound-1.17.1-10.oe2403.aarch64.rpm",
        "unbound-anchor-1.17.1-10.oe2403.aarch64.rpm",
        "unbound-debuginfo-1.17.1-10.oe2403.aarch64.rpm",
        "unbound-debugsource-1.17.1-10.oe2403.aarch64.rpm",
        "unbound-devel-1.17.1-10.oe2403.aarch64.rpm",
        "unbound-help-1.17.1-10.oe2403.aarch64.rpm",
        "unbound-libs-1.17.1-10.oe2403.aarch64.rpm",
        "unbound-utils-1.17.1-10.oe2403.aarch64.rpm"
    ],
    "x86_64": [
        "python3-unbound-1.17.1-10.oe2403.x86_64.rpm",
        "unbound-1.17.1-10.oe2403.x86_64.rpm",
        "unbound-anchor-1.17.1-10.oe2403.x86_64.rpm",
        "unbound-debuginfo-1.17.1-10.oe2403.x86_64.rpm",
        "unbound-debugsource-1.17.1-10.oe2403.x86_64.rpm",
        "unbound-devel-1.17.1-10.oe2403.x86_64.rpm",
        "unbound-help-1.17.1-10.oe2403.x86_64.rpm",
        "unbound-libs-1.17.1-10.oe2403.x86_64.rpm",
        "unbound-utils-1.17.1-10.oe2403.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / unbound

Package

Name: unbound
Purl: pkg:rpm/openEuler/unbound&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.13.2-16.oe2203sp4

Ecosystem specific

{
    "src": [
        "unbound-1.13.2-16.oe2203sp4.src.rpm"
    ],
    "aarch64": [
        "python3-unbound-1.13.2-16.oe2203sp4.aarch64.rpm",
        "unbound-1.13.2-16.oe2203sp4.aarch64.rpm",
        "unbound-anchor-1.13.2-16.oe2203sp4.aarch64.rpm",
        "unbound-debuginfo-1.13.2-16.oe2203sp4.aarch64.rpm",
        "unbound-debugsource-1.13.2-16.oe2203sp4.aarch64.rpm",
        "unbound-devel-1.13.2-16.oe2203sp4.aarch64.rpm",
        "unbound-help-1.13.2-16.oe2203sp4.aarch64.rpm",
        "unbound-libs-1.13.2-16.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "python3-unbound-1.13.2-16.oe2203sp4.x86_64.rpm",
        "unbound-1.13.2-16.oe2203sp4.x86_64.rpm",
        "unbound-anchor-1.13.2-16.oe2203sp4.x86_64.rpm",
        "unbound-debuginfo-1.13.2-16.oe2203sp4.x86_64.rpm",
        "unbound-debugsource-1.13.2-16.oe2203sp4.x86_64.rpm",
        "unbound-devel-1.13.2-16.oe2203sp4.x86_64.rpm",
        "unbound-help-1.13.2-16.oe2203sp4.x86_64.rpm",
        "unbound-libs-1.13.2-16.oe2203sp4.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / unbound

Package

Name: unbound
Purl: pkg:rpm/openEuler/unbound&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.13.2-16.oe2203sp3

Ecosystem specific

{
    "src": [
        "unbound-1.13.2-16.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "python3-unbound-1.13.2-16.oe2203sp3.aarch64.rpm",
        "unbound-1.13.2-16.oe2203sp3.aarch64.rpm",
        "unbound-anchor-1.13.2-16.oe2203sp3.aarch64.rpm",
        "unbound-debuginfo-1.13.2-16.oe2203sp3.aarch64.rpm",
        "unbound-debugsource-1.13.2-16.oe2203sp3.aarch64.rpm",
        "unbound-devel-1.13.2-16.oe2203sp3.aarch64.rpm",
        "unbound-help-1.13.2-16.oe2203sp3.aarch64.rpm",
        "unbound-libs-1.13.2-16.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "python3-unbound-1.13.2-16.oe2203sp3.x86_64.rpm",
        "unbound-1.13.2-16.oe2203sp3.x86_64.rpm",
        "unbound-anchor-1.13.2-16.oe2203sp3.x86_64.rpm",
        "unbound-debuginfo-1.13.2-16.oe2203sp3.x86_64.rpm",
        "unbound-debugsource-1.13.2-16.oe2203sp3.x86_64.rpm",
        "unbound-devel-1.13.2-16.oe2203sp3.x86_64.rpm",
        "unbound-help-1.13.2-16.oe2203sp3.x86_64.rpm",
        "unbound-libs-1.13.2-16.oe2203sp3.x86_64.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / unbound

Package

Name: unbound
Purl: pkg:rpm/openEuler/unbound&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.0-16.oe2003sp4

Ecosystem specific

{
    "src": [
        "unbound-1.11.0-16.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "python3-unbound-1.11.0-16.oe2003sp4.aarch64.rpm",
        "unbound-1.11.0-16.oe2003sp4.aarch64.rpm",
        "unbound-debuginfo-1.11.0-16.oe2003sp4.aarch64.rpm",
        "unbound-debugsource-1.11.0-16.oe2003sp4.aarch64.rpm",
        "unbound-devel-1.11.0-16.oe2003sp4.aarch64.rpm",
        "unbound-help-1.11.0-16.oe2003sp4.aarch64.rpm",
        "unbound-libs-1.11.0-16.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "python3-unbound-1.11.0-16.oe2003sp4.x86_64.rpm",
        "unbound-1.11.0-16.oe2003sp4.x86_64.rpm",
        "unbound-debuginfo-1.11.0-16.oe2003sp4.x86_64.rpm",
        "unbound-debugsource-1.11.0-16.oe2003sp4.x86_64.rpm",
        "unbound-devel-1.11.0-16.oe2003sp4.x86_64.rpm",
        "unbound-help-1.11.0-16.oe2003sp4.x86_64.rpm",
        "unbound-libs-1.11.0-16.oe2003sp4.x86_64.rpm"
    ]
}