DSA-4544: -1 unbound -- security update
Published Oct 16, 2019
·Updated
unbound - security update
Other sources
X41 D-Sec discovered that unbound, a validating, recursive, and caching DNS resolver, did not correctly process some NOTIFY queries. This could lead to remote denial-of-service by application crash.
Affected Software
2 affected components
debian/unbound
debian/unbound
Event History
Oct 16, 2019
Advisory Published
12:00 AM
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker able to send specially crafted DNS NOTIFY queries to an affected Unbound resolver could trigger an application crash and cause denial of service.
2
What functionality is involved in the vulnerable request handling?
The issue is in Unbound's processing of certain DNS NOTIFY queries. The provided information does not identify any configuration prerequisites or affected default settings.
3
How can I identify the tracked vulnerability?
This issue is tracked as CVE-2019-16866 and is covered by Debian Security Advisory DSA-4544.