CVE-2017-15105
Fixed in a distro release EPSS 3%
A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.
Products: NLnet Labs unbound
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | unbound | 1.7.1-1 |
| Debian 13 | unbound | 1.7.1-1 |
| Debian 14 | unbound | 1.7.1-1 |
| Debian 7 | unbound | 1.4.17-3+deb7u3 |
| Debian 8 | unbound | 1.4.22-3+deb8u4 |
| Ubuntu 14.04 LTS | unbound | 1.4.22-1ubuntu4.14.04.3 |
| Ubuntu 16.04 LTS | unbound | 1.5.8-1ubuntu1.1 |
| Ubuntu 18.04 LTS | unbound | 1.6.7-1ubuntu2.1 |
| openSUSE Tumbleweed | unbound | 1.13.2-1.2 |