CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...
7.5 HighFix available
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
3.20%Up 0.3 points since Apr 14, 2021
What each source reports
NVD Score used
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
CVE-2020-12662- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
CVE List No score
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
CVE-2020-12662- Updated
- 2026-11-02
EUVDEUVD-2020-4961 No score
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
EUVD-2020-4961- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w2pr-2387-vxgh No score
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
GHSA-w2pr-2387-vxgh- Weakness
- CWE-674
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
ALPINE-CVE-2020-12662- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-6929
CVE-2020-12662 affecting package unbound for versions less than 1.10.0-5
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
AZL-6929- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 16 moreShow less
OSV
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
CVE-2020-12662- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
DEBIAN-CVE-2020-12662- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2414
Red Hat Security Advisory: unbound security update
- Record
RHSA-2020:2414- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2416
Red Hat Security Advisory: unbound security update
- Record
RHSA-2020:2416- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2418
Red Hat Security Advisory: unbound security update
- Record
RHSA-2020:2418- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2419
Red Hat Security Advisory: unbound security update
- Record
RHSA-2020:2419- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2640
Red Hat Security Advisory: unbound security update
- Record
RHSA-2020:2640- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:4181
Red Hat Security Advisory: unbound security update
- Record
RHSA-2020:4181- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Record
UBUNTU-CVE-2020-12662- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0224 No score
Updated unbound packages fix security vulnerabilities
Updated unbound packages fix security vulnerabilities:
Unbound can be tricked into amplifying an incoming query into a large number of queries directed to a target (CVE-2020-12662).
Malformed answers from upstream name servers can be used to make Unbound unresponsive (CVE-2020-12663).
- Record
MGASA-2020-0224- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0912-1 No score
Security update for unbound
This update for unbound fixes the following issues:
- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target (bsc#1171889).
- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers could have been used to make unbound unresponsive (bsc#1171889).
- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed code execution after receiving a special crafted answer (bsc#1157268).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- Record
openSUSE-SU-2020:0912-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0913-1 No score
Security update for unbound
This update for unbound fixes the following issues:
- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target (bsc#1171889).
- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers could have been used to make unbound unresponsive (bsc#1171889).
- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed code execution after receiving a special crafted answer (bsc#1157268).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- Record
openSUSE-SU-2020:0913-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11005-1 No score
libunbound8-1.13.2-1.2 on GA media
These are all security issues fixed in the libunbound8-1.13.2-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11005-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1772-1 No score
Security update for unbound
This update for unbound fixes the following issues:
- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target (bsc#1171889).
- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers could have been used to make unbound unresponsive (bsc#1171889).
- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed code execution after receiving a special crafted answer (bsc#1157268).
- Record
SUSE-SU-2020:1772-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1819-1 No score
Security update for unbound
This update for unbound fixes the following issues:
- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target (bsc#1171889).
- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers could have been used to make unbound unresponsive (bsc#1171889).
- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed code execution after receiving a special crafted answer (bsc#1157268).
- Record
SUSE-SU-2020:1819-1- Updated
- 2026-11-02
OSVUSN-4374-1 No score
unbound vulnerabilities
Lior Shafir, Yehuda Afek, and Anat Bremler-Barr discovered that Unbound incorrectly handled certain queries. A remote attacker could use this issue to perform an amplification attack directed at a target. (CVE-2020-12662)
It was discovered that Unbound incorrectly handled certain malformed answers. A remote attacker could possibly use this issue to cause Unbound to crash, resulting in a denial of service. (CVE-2020-12663)
- Record
USN-4374-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
unboundAlpine:v3.10 |
before 1.9.1-r8 | 1.9.1-r8 |
unboundAlpine:v3.11 |
before 1.9.6-r1 | 1.9.6-r1 |
unboundAlpine:v3.12 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.13 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.14 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.15 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.16 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.17 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.18 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.19 |
before 1.10.1-r0 | 1.10.1-r0 |
Show 97 moreShow less
| Package | Affected | Fixed |
|---|---|---|
unboundAlpine:v3.20 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.21 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.22 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.23 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.24 |
before 1.10.1-r0 | 1.10.1-r0 |
unboundAlpine:v3.9 |
before 1.8.3-r4 | 1.8.3-r4 |
unboundAzure Linux:2 |
before 1.10.0-5 | 1.10.0-5 |
unboundDebian:12 |
before 1.10.1-1 | 1.10.1-1 |
unboundDebian:13 |
before 1.10.1-1 | 1.10.1-1 |
unboundDebian:14 |
before 1.10.1-1 | 1.10.1-1 |
unbound1.9Debian:9 |
before 1.9.0-2+deb10u2~deb9u1 | 1.9.0-2+deb10u2~deb9u1 |
unboundDebian:10 |
before 1.9.0-2+deb10u2, plus listed versions 1.9.0-21.9.0-2+deb10u1 |
1.9.0-2+deb10u2 |
unboundMageia:7 |
before 1.10.1-1.mga7 | 1.10.1-1.mga7 |
unboundRed Hat:enterprise_linux:7::client |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-libsRed Hat:enterprise_linux:7::client |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-develRed Hat:enterprise_linux:7::client |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-pythonRed Hat:enterprise_linux:7::client |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unboundRed Hat:enterprise_linux:7::computenode |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-libsRed Hat:enterprise_linux:7::computenode |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-develRed Hat:enterprise_linux:7::computenode |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-pythonRed Hat:enterprise_linux:7::computenode |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unboundRed Hat:enterprise_linux:7::server |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-libsRed Hat:enterprise_linux:7::server |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-develRed Hat:enterprise_linux:7::server |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-pythonRed Hat:enterprise_linux:7::server |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unboundRed Hat:enterprise_linux:7::workstation |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-libsRed Hat:enterprise_linux:7::workstation |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-develRed Hat:enterprise_linux:7::workstation |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
unbound-pythonRed Hat:enterprise_linux:7::workstation |
before 0:1.6.6-4.el7_8 | 0:1.6.6-4.el7_8 |
python3-unboundRed Hat:enterprise_linux:8::appstream |
before 0:1.7.3-11.el8_2 | 0:1.7.3-11.el8_2 |
python3-unbound-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.7.3-11.el8_2 | 0:1.7.3-11.el8_2 |
unboundRed Hat:enterprise_linux:8::appstream |
before 0:1.7.3-11.el8_2 | 0:1.7.3-11.el8_2 |
unbound-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.7.3-11.el8_2 | 0:1.7.3-11.el8_2 |
unbound-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:1.7.3-11.el8_2 | 0:1.7.3-11.el8_2 |
unbound-develRed Hat:enterprise_linux:8::appstream |
before 0:1.7.3-11.el8_2 | 0:1.7.3-11.el8_2 |
unbound-libsRed Hat:enterprise_linux:8::appstream |
before 0:1.7.3-11.el8_2 | 0:1.7.3-11.el8_2 |
unbound-libs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:1.7.3-11.el8_2 | 0:1.7.3-11.el8_2 |
python3-unboundRed Hat:rhel_e4s:8.0::appstream |
before 0:1.7.3-9.el8_0 | 0:1.7.3-9.el8_0 |
python3-unbound-debuginfoRed Hat:rhel_e4s:8.0::appstream |
before 0:1.7.3-9.el8_0 | 0:1.7.3-9.el8_0 |
unboundRed Hat:rhel_e4s:8.0::appstream |
before 0:1.7.3-9.el8_0 | 0:1.7.3-9.el8_0 |
unbound-debuginfoRed Hat:rhel_e4s:8.0::appstream |
before 0:1.7.3-9.el8_0 | 0:1.7.3-9.el8_0 |
unbound-debugsourceRed Hat:rhel_e4s:8.0::appstream |
before 0:1.7.3-9.el8_0 | 0:1.7.3-9.el8_0 |
unbound-develRed Hat:rhel_e4s:8.0::appstream |
before 0:1.7.3-9.el8_0 | 0:1.7.3-9.el8_0 |
unbound-libsRed Hat:rhel_e4s:8.0::appstream |
before 0:1.7.3-9.el8_0 | 0:1.7.3-9.el8_0 |
unbound-libs-debuginfoRed Hat:rhel_e4s:8.0::appstream |
before 0:1.7.3-9.el8_0 | 0:1.7.3-9.el8_0 |
python3-unboundRed Hat:rhel_eus:8.1::appstream |
before 0:1.7.3-9.el8_1 | 0:1.7.3-9.el8_1 |
python3-unbound-debuginfoRed Hat:rhel_eus:8.1::appstream |
before 0:1.7.3-9.el8_1 | 0:1.7.3-9.el8_1 |
unboundRed Hat:rhel_eus:8.1::appstream |
before 0:1.7.3-9.el8_1 | 0:1.7.3-9.el8_1 |
unbound-debuginfoRed Hat:rhel_eus:8.1::appstream |
before 0:1.7.3-9.el8_1 | 0:1.7.3-9.el8_1 |
unbound-debugsourceRed Hat:rhel_eus:8.1::appstream |
before 0:1.7.3-9.el8_1 | 0:1.7.3-9.el8_1 |
unbound-develRed Hat:rhel_eus:8.1::appstream |
before 0:1.7.3-9.el8_1 | 0:1.7.3-9.el8_1 |
unbound-libsRed Hat:rhel_eus:8.1::appstream |
before 0:1.7.3-9.el8_1 | 0:1.7.3-9.el8_1 |
unbound-libs-debuginfoRed Hat:rhel_eus:8.1::appstream |
before 0:1.7.3-9.el8_1 | 0:1.7.3-9.el8_1 |
unboundRed Hat:enterprise_linux:6::client |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-libsRed Hat:enterprise_linux:6::client |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-develRed Hat:enterprise_linux:6::client |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-pythonRed Hat:enterprise_linux:6::client |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unboundRed Hat:enterprise_linux:6::server |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-libsRed Hat:enterprise_linux:6::server |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-develRed Hat:enterprise_linux:6::server |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-pythonRed Hat:enterprise_linux:6::server |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unboundRed Hat:enterprise_linux:6::workstation |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-libsRed Hat:enterprise_linux:6::workstation |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-develRed Hat:enterprise_linux:6::workstation |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unbound-pythonRed Hat:enterprise_linux:6::workstation |
before 0:1.4.20-29.el6_10.1 | 0:1.4.20-29.el6_10.1 |
unboundRed Hat:rhel_eus:7.7::computenode |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unbound-debuginfoRed Hat:rhel_eus:7.7::computenode |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unbound-libsRed Hat:rhel_eus:7.7::computenode |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unbound-develRed Hat:rhel_eus:7.7::computenode |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unbound-pythonRed Hat:rhel_eus:7.7::computenode |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unboundRed Hat:rhel_eus:7.7::server |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unbound-debuginfoRed Hat:rhel_eus:7.7::server |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unbound-libsRed Hat:rhel_eus:7.7::server |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unbound-develRed Hat:rhel_eus:7.7::server |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unbound-pythonRed Hat:rhel_eus:7.7::server |
before 0:1.6.6-2.el7_7 | 0:1.6.6-2.el7_7 |
unboundSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 1.6.8-10.3.1 | 1.6.8-10.3.1 |
unboundSUSE:Linux Enterprise Module for Basesystem 15 SP2 |
before 1.6.8-10.3.1 | 1.6.8-10.3.1 |
unboundSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 1.6.8-3.6.1 | 1.6.8-3.6.1 |
unboundSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 1.6.8-3.6.1 | 1.6.8-3.6.1 |
unboundSUSE:Linux Enterprise Server 15-LTSS |
before 1.6.8-3.6.1 | 1.6.8-3.6.1 |
unboundSUSE:Linux Enterprise Server for SAP Applications 15 |
before 1.6.8-3.6.1 | 1.6.8-3.6.1 |
unboundUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.4.20-11.4.21-11.4.21-1ubuntu11.4.21-1ubuntu21.4.22-1ubuntu1 Show 11 moreShow less1.4.22-1ubuntu21.4.22-1ubuntu31.4.22-1ubuntu41.4.22-1ubuntu4.14.04.11.4.22-1ubuntu4.14.04.21.4.22-1ubuntu4.14.04.31.4.22-1ubuntu4.14.04.3+esm11.4.22-1ubuntu4.14.04.3+esm21.4.22-1ubuntu4.14.04.3+esm31.4.22-1ubuntu4.14.04.3+esm41.4.22-1ubuntu4.14.04.3+esm5 |
None known |
unboundUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.4.22-1ubuntu61.5.7-1ubuntu11.5.7-1ubuntu21.5.8-1ubuntu11.5.8-1ubuntu1.1 Show 5 moreShow less1.5.8-1ubuntu1.1+esm11.5.8-1ubuntu1.1+esm21.5.8-1ubuntu1.1+esm31.5.8-1ubuntu1.1+esm41.5.8-1ubuntu1.1+esm5 |
None known |
unboundUbuntu:18.04:LTS |
before 1.6.7-1ubuntu2.3, plus listed versions 1.6.5-11.6.7-11.6.7-1build11.6.7-1ubuntu11.6.7-1ubuntu21.6.7-1ubuntu2.11.6.7-1ubuntu2.2 |
1.6.7-1ubuntu2.3 |
unboundUbuntu:20.04:LTS |
before 1.9.4-2ubuntu1.1, plus listed versions 1.9.0-2ubuntu11.9.0-2ubuntu21.9.4-21.9.4-2ubuntu1 |
1.9.4-2ubuntu1.1 |
libunbound-devel-miniopenSUSE:Leap 15.1 |
before 1.6.8-lp151.8.3.1 | 1.6.8-lp151.8.3.1 |
unboundopenSUSE:Leap 15.1 |
before 1.6.8-lp151.8.3.1 | 1.6.8-lp151.8.3.1 |
libunbound-devel-miniopenSUSE:Leap 15.2 |
before 1.6.8-lp152.9.3.1 | 1.6.8-lp152.9.3.1 |
unboundopenSUSE:Leap 15.2 |
before 1.6.8-lp152.9.3.1 | 1.6.8-lp152.9.3.1 |
unboundopenSUSE:Tumbleweed |
before 1.13.2-1.2 | 1.13.2-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-12662 is a high vulnerability (CVSS 7.5) in Nlnetlabs Unbound, published May 19, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.20%, the 88th percentile. Fixed in unbound 1.9.1-r8.
References
nlnetlabs.nl/downloads/unbound/CVE-2020-12662_2020-12663.txt
nxnsattack.com
openwall.com/lists/oss-security/2020/05/19/5
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F5NFROI2OMCZLYRTCNGHGO3TUD32LCIQ
debian.org/security/2020/dsa-4694
Show 50 moreShow less
synology.com/security/advisory/Synology_SA_20_12
usn.ubuntu.com/4374-1
lists.opensuse.org/opensuse-security-announce/2020-06/msg00069.html
security.netapp.com/advisory/ntap-20200702-0006
security.FreeBSD.org/advisories/FreeBSD-SA-20:19.unbound.asc
lists.debian.org/debian-lts-announce/2021/02/msg00017.html
nvd.nist.gov/vuln/detail/CVE-2020-12662
github.com/advisories/GHSA-w2pr-2387-vxgh
security.alpinelinux.org/vuln/CVE-2020-12662
security-tracker.debian.org/tracker/CVE-2020-12662
advisories.mageia.org/MGASA-2020-0224.html
bugs.mageia.org/show_bug.cgi?id=26646
access.redhat.com/errata/RHSA-2020:2414
bugzilla.redhat.com/show_bug.cgi?id=1837597
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2414.json
cve.org/CVERecord?id=CVE-2020-12662
suse.com/support/update/announcement/2020/suse-su-20201772-1
bugzilla.suse.com/1157268
ubuntu.com/security/CVE-2020-12662