USN-6791-1: Unbound vulnerability
Published May 28, 2024
·Updated
It was discovered that Unbound could take part in a denial of service amplification attack known as DNSBomb. This update introduces certain resource limits to make the impact from Unbound significantly lower.
Affected Software
16 affected componentsFixes available
All of the following
ubuntu/libunbound8<1.19.2-1ubuntu3.1
1.19.2-1ubuntu3.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/unbound<1.19.2-1ubuntu3.1
1.19.2-1ubuntu3.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libunbound8<1.17.1-2ubuntu0.2
1.17.1-2ubuntu0.2
Ubuntu Ubuntu=23.10
All of the following
ubuntu/unbound<1.17.1-2ubuntu0.2
1.17.1-2ubuntu0.2
Ubuntu Ubuntu=23.10
All of the following
ubuntu/libunbound8<1.13.1-1ubuntu5.5
1.13.1-1ubuntu5.5
Ubuntu Ubuntu=22.04
All of the following
ubuntu/unbound<1.13.1-1ubuntu5.5
1.13.1-1ubuntu5.5
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libunbound8<1.9.4-2ubuntu1.6
1.9.4-2ubuntu1.6
Ubuntu Ubuntu=20.04
All of the following
ubuntu/unbound<1.9.4-2ubuntu1.6
1.9.4-2ubuntu1.6
Ubuntu Ubuntu=20.04
Event History
May 28, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6791-1?
USN-6791-1 addresses a denial of service vulnerability that allows DNS amplification attacks.
2
How do I fix USN-6791-1?
To fix USN-6791-1, update Unbound or libunbound8 to the specified remedial versions for your Ubuntu release.
3
Which versions of Unbound are affected by USN-6791-1?
USN-6791-1 affects Unbound versions prior to 1.19.2-1ubuntu3.1, 1.17.1-2ubuntu0.2, 1.13.1-1ubuntu5.5, and 1.9.4-2ubuntu1.6.
4
What is DNSBomb in relation to USN-6791-1?
DNSBomb is a type of denial of service amplification attack that exploits vulnerabilities in DNS resolvers like Unbound.
5
Which Ubuntu versions are impacted by USN-6791-1?
The impacted Ubuntu versions include 20.04, 22.04, 23.10, and 24.04.