CVE-2025-5994
Fixed in a distro release EPSS <1%CVSS 8.7
A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous replies.
Products: NLnet Labs unbound
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | python3-unbound | 1.20.0-12.el10_0 |
| AlmaLinux 10 | unbound | 1.20.0-12.el10_0 |
| AlmaLinux 10 | unbound-anchor | 1.20.0-12.el10_0 |
| AlmaLinux 10 | unbound-devel | 1.20.0-12.el10_0 |
| AlmaLinux 10 | unbound-dracut | 1.20.0-12.el10_0 |
| AlmaLinux 10 | unbound-libs | 1.20.0-12.el10_0 |
| AlmaLinux 8 | python3-unbound | 1.16.2-5.9.el8_10 |
| AlmaLinux 8 | unbound | 1.16.2-5.9.el8_10 |
| AlmaLinux 8 | unbound-devel | 1.16.2-5.9.el8_10 |
| AlmaLinux 8 | unbound-libs | 1.16.2-5.9.el8_10 |
| AlmaLinux 9 | python3-unbound | 1.16.2-19.el9_6.1 |
| AlmaLinux 9 | unbound | 1.16.2-19.el9_6.1 |
| AlmaLinux 9 | unbound-devel | 1.16.2-19.el9_6.1 |
| AlmaLinux 9 | unbound-dracut | 1.16.2-19.el9_6.1 |
| AlmaLinux 9 | unbound-libs | 1.16.2-19.el9_6.1 |
| Alpine 3.19 | unbound | 1.20.0-r2 |
| Alpine 3.20 | unbound | 1.20.0-r2 |
| Alpine 3.21 | unbound | 1.22.0-r1 |
| Alpine 3.22 | unbound | 1.23.1-r0 |
| Alpine 3.23 | unbound | 1.23.1-r0 |
| Alpine 3.24 | unbound | 1.23.1-r0 |
| Amazon Linux 2 | python2-unbound | 1.7.3-15.amzn2.0.10 |
| Amazon Linux 2 | python3-unbound | 1.7.3-15.amzn2.0.10 |
| Amazon Linux 2 | unbound | 1.7.3-15.amzn2.0.10 |
| Amazon Linux 2 | unbound-devel | 1.7.3-15.amzn2.0.10 |
| Amazon Linux 2 | unbound-libs | 1.7.3-15.amzn2.0.10 |
| Amazon Linux 2023 | python3-unbound | 1.17.1-1.amzn2023.0.8 |
| Amazon Linux 2023 | unbound | 1.17.1-1.amzn2023.0.8 |
| Amazon Linux 2023 | unbound-anchor | 1.17.1-1.amzn2023.0.8 |
| Amazon Linux 2023 | unbound-devel | 1.17.1-1.amzn2023.0.8 |
| Amazon Linux 2023 | unbound-libs | 1.17.1-1.amzn2023.0.8 |
| Amazon Linux 2023 | unbound-utils | 1.17.1-1.amzn2023.0.8 |
| Debian 11 | unbound | 1.13.1-1+deb11u5 |
| Debian 12 | unbound | 1.17.1-2+deb12u3 |
| Debian 13 | unbound | 1.22.0-2 |
| Debian 14 | unbound | 1.22.0-2 |
| Red Hat Enterprise Linux 10.0 | python3-unbound | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | python3-unbound-debuginfo | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-anchor | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-anchor-debuginfo | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-debuginfo | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-debugsource | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-devel | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-dracut | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-libs | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-libs-debuginfo | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 10.0 | unbound-utils-debuginfo | 0:1.20.0-12.el10_0 |
| Red Hat Enterprise Linux 8 | python3-unbound | 0:1.16.2-5.9.el8_10 |
| Red Hat Enterprise Linux 8 | python3-unbound-debuginfo | 0:1.16.2-5.9.el8_10 |
| Red Hat Enterprise Linux 8 | unbound | 0:1.16.2-5.9.el8_10 |
| Red Hat Enterprise Linux 8 | unbound-debuginfo | 0:1.16.2-5.9.el8_10 |
| Red Hat Enterprise Linux 8 | unbound-debugsource | 0:1.16.2-5.9.el8_10 |
| Red Hat Enterprise Linux 8 | unbound-devel | 0:1.16.2-5.9.el8_10 |
| Red Hat Enterprise Linux 8 | unbound-libs | 0:1.16.2-5.9.el8_10 |
| Red Hat Enterprise Linux 8 | unbound-libs-debuginfo | 0:1.16.2-5.9.el8_10 |
| Red Hat Enterprise Linux 9 | python3-unbound | 0:1.16.2-19.el9_6.1 |
| Red Hat Enterprise Linux 9 | python3-unbound-debuginfo | 0:1.16.2-19.el9_6.1 |
| Red Hat Enterprise Linux 9 | unbound | 0:1.16.2-19.el9_6.1 |
| Red Hat Enterprise Linux 9 | unbound-debuginfo | 0:1.16.2-19.el9_6.1 |
| Red Hat Enterprise Linux 9 | unbound-debugsource | 0:1.16.2-19.el9_6.1 |
| Red Hat Enterprise Linux 9 | unbound-devel | 0:1.16.2-19.el9_6.1 |
| Red Hat Enterprise Linux 9 | unbound-dracut | 0:1.16.2-19.el9_6.1 |
| Red Hat Enterprise Linux 9 | unbound-libs | 0:1.16.2-19.el9_6.1 |
| Red Hat Enterprise Linux 9 | unbound-libs-debuginfo | 0:1.16.2-19.el9_6.1 |
| Red Hat rhel aus 8.2 | python3-unbound | 0:1.7.3-12.el8_2.2 |
| Red Hat rhel aus 8.2 | python3-unbound-debuginfo | 0:1.7.3-12.el8_2.2 |
| Red Hat rhel aus 8.2 | unbound | 0:1.7.3-12.el8_2.2 |
| Red Hat rhel aus 8.2 | unbound-debuginfo | 0:1.7.3-12.el8_2.2 |
| Red Hat rhel aus 8.2 | unbound-debugsource | 0:1.7.3-12.el8_2.2 |
| Red Hat rhel aus 8.2 | unbound-devel | 0:1.7.3-12.el8_2.2 |
| Red Hat rhel aus 8.2 | unbound-libs | 0:1.7.3-12.el8_2.2 |
| Red Hat rhel aus 8.2 | unbound-libs-debuginfo | 0:1.7.3-12.el8_2.2 |
| Red Hat rhel aus 8.4 | python3-unbound | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel aus 8.4 | python3-unbound-debuginfo | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel aus 8.4 | unbound | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel aus 8.4 | unbound-debuginfo | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel aus 8.4 | unbound-debugsource | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel aus 8.4 | unbound-devel | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel aus 8.4 | unbound-libs | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel aus 8.4 | unbound-libs-debuginfo | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel aus 8.6 | python3-unbound | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel aus 8.6 | python3-unbound-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel aus 8.6 | unbound | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel aus 8.6 | unbound-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel aus 8.6 | unbound-debugsource | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel aus 8.6 | unbound-devel | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel aus 8.6 | unbound-libs | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel aus 8.6 | unbound-libs-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.6 | python3-unbound | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.6 | python3-unbound-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.6 | unbound | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.6 | unbound-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.6 | unbound-debugsource | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.6 | unbound-devel | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.6 | unbound-libs | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.6 | unbound-libs-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel e4s 8.8 | python3-unbound | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel e4s 8.8 | python3-unbound-debuginfo | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel e4s 8.8 | unbound | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel e4s 8.8 | unbound-debuginfo | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel e4s 8.8 | unbound-debugsource | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel e4s 8.8 | unbound-devel | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel e4s 8.8 | unbound-libs | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel e4s 8.8 | unbound-libs-debuginfo | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel e4s 9.0 | python3-unbound | 0:1.13.1-13.el9_0.5 |
| Red Hat rhel e4s 9.0 | python3-unbound-debuginfo | 0:1.13.1-13.el9_0.5 |
| Red Hat rhel e4s 9.0 | unbound | 0:1.13.1-13.el9_0.5 |
| Red Hat rhel e4s 9.0 | unbound-debuginfo | 0:1.13.1-13.el9_0.5 |
| Red Hat rhel e4s 9.0 | unbound-debugsource | 0:1.13.1-13.el9_0.5 |
| Red Hat rhel e4s 9.0 | unbound-libs | 0:1.13.1-13.el9_0.5 |
| Red Hat rhel e4s 9.0 | unbound-libs-debuginfo | 0:1.13.1-13.el9_0.5 |
| Red Hat rhel e4s 9.2 | python3-unbound | 0:1.16.2-3.el9_2.5 |
| Red Hat rhel e4s 9.2 | python3-unbound-debuginfo | 0:1.16.2-3.el9_2.5 |
| Red Hat rhel e4s 9.2 | unbound | 0:1.16.2-3.el9_2.5 |
| Red Hat rhel e4s 9.2 | unbound-debuginfo | 0:1.16.2-3.el9_2.5 |
| Red Hat rhel e4s 9.2 | unbound-debugsource | 0:1.16.2-3.el9_2.5 |
| Red Hat rhel e4s 9.2 | unbound-libs | 0:1.16.2-3.el9_2.5 |
| Red Hat rhel e4s 9.2 | unbound-libs-debuginfo | 0:1.16.2-3.el9_2.5 |
| Red Hat rhel eus 9.4 | python3-unbound | 0:1.16.2-8.el9_4.2 |
| Red Hat rhel eus 9.4 | python3-unbound-debuginfo | 0:1.16.2-8.el9_4.2 |
| Red Hat rhel eus 9.4 | unbound | 0:1.16.2-8.el9_4.2 |
| Red Hat rhel eus 9.4 | unbound-debuginfo | 0:1.16.2-8.el9_4.2 |
| Red Hat rhel eus 9.4 | unbound-debugsource | 0:1.16.2-8.el9_4.2 |
| Red Hat rhel eus 9.4 | unbound-devel | 0:1.16.2-8.el9_4.2 |
| Red Hat rhel eus 9.4 | unbound-libs | 0:1.16.2-8.el9_4.2 |
| Red Hat rhel eus 9.4 | unbound-libs-debuginfo | 0:1.16.2-8.el9_4.2 |
| Red Hat rhel eus long life 8.4 | python3-unbound | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel eus long life 8.4 | python3-unbound-debuginfo | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel eus long life 8.4 | unbound | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel eus long life 8.4 | unbound-debuginfo | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel eus long life 8.4 | unbound-debugsource | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel eus long life 8.4 | unbound-devel | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel eus long life 8.4 | unbound-libs | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel eus long life 8.4 | unbound-libs-debuginfo | 0:1.7.3-15.el8_4.2 |
| Red Hat rhel tus 8.6 | python3-unbound | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel tus 8.6 | python3-unbound-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel tus 8.6 | unbound | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel tus 8.6 | unbound-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel tus 8.6 | unbound-debugsource | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel tus 8.6 | unbound-devel | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel tus 8.6 | unbound-libs | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel tus 8.6 | unbound-libs-debuginfo | 0:1.7.3-17.el8_6.6 |
| Red Hat rhel tus 8.8 | python3-unbound | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel tus 8.8 | python3-unbound-debuginfo | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel tus 8.8 | unbound | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel tus 8.8 | unbound-debuginfo | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel tus 8.8 | unbound-debugsource | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel tus 8.8 | unbound-devel | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel tus 8.8 | unbound-libs | 0:1.16.2-5.el8_8.5 |
| Red Hat rhel tus 8.8 | unbound-libs-debuginfo | 0:1.16.2-5.el8_8.5 |
| Rocky Linux 8 | unbound | 0:1.16.2-5.9.el8 |
| Rocky Linux 9 | unbound | 0:1.16.2-19.el9_6.1 |
| Ubuntu 22.04 LTS | unbound | 1.13.1-1ubuntu5.11 |
| Ubuntu 24.04 LTS | unbound | 1.19.2-1ubuntu3.5 |
| Ubuntu 25.10 | unbound | 1.22.0-2ubuntu1 |
| Ubuntu Pro 14.04 LTS | unbound | no fix |
| Ubuntu Pro 16.04 LTS | unbound | no fix |
| Ubuntu Pro 18.04 LTS | unbound | no fix |
| Ubuntu Pro 20.04 LTS | unbound | no fix |
| openSUSE Tumbleweed | unbound | 1.23.1-1.1 |