{"id":"CVE-2020-12663","aliases":["ALPINE-CVE-2020-12663","AZL-6930","DEBIAN-CVE-2020-12663","DLA-2556-1","DSA-4694-1","EUVD-2020-4962","GHSA-rhjg-fh2p-jpv5","MGASA-2020-0224","RHSA-2020:2414","RHSA-2020:2416","RHSA-2020:2418","RHSA-2020:2419","RHSA-2020:2640","RHSA-2020:4181","SUSE-SU-2020:1772-1","SUSE-SU-2020:1819-1","UBUNTU-CVE-2020-12663","USN-4374-1","openSUSE-SU-2020:0912-1","openSUSE-SU-2020:0913-1","openSUSE-SU-2024:11005-1"],"status":"published","title":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.03588,"percentile":0.8952,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2020-05-19T11:00:00Z","modified":"2026-10-26T12:02:25Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"unbound","fixed_in":["1.9.1-r8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"unbound","fixed_in":["1.9.6-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"unbound","fixed_in":["1.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"unbound","fixed_in":["1.8.3-r4"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"unbound","fixed_in":["1.10.0-5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"unbound","fixed_in":["1.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"unbound","fixed_in":["1.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"unbound","fixed_in":["1.10.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"unbound","fixed_in":["1.6.7-1ubuntu2.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"unbound","fixed_in":["1.9.4-2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-r4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"unbound1.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-2+deb10u2~deb9u1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-2+deb10u2"}]}],"versions":["1.9.0-2","1.9.0-2+deb10u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-4.el7_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"unbound-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"unbound-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"python3-unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"python3-unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"unbound-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"unbound-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-9.el8_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.20-29.el6_10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"unbound-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.6-2.el7_7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-10.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-10.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.20-1","1.4.21-1","1.4.21-1ubuntu1","1.4.21-1ubuntu2","1.4.22-1ubuntu1","1.4.22-1ubuntu2","1.4.22-1ubuntu3","1.4.22-1ubuntu4","1.4.22-1ubuntu4.14.04.1","1.4.22-1ubuntu4.14.04.2","1.4.22-1ubuntu4.14.04.3","1.4.22-1ubuntu4.14.04.3+esm1","1.4.22-1ubuntu4.14.04.3+esm2","1.4.22-1ubuntu4.14.04.3+esm3","1.4.22-1ubuntu4.14.04.3+esm4","1.4.22-1ubuntu4.14.04.3+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.22-1ubuntu6","1.5.7-1ubuntu1","1.5.7-1ubuntu2","1.5.8-1ubuntu1","1.5.8-1ubuntu1.1","1.5.8-1ubuntu1.1+esm1","1.5.8-1ubuntu1.1+esm2","1.5.8-1ubuntu1.1+esm3","1.5.8-1ubuntu1.1+esm4","1.5.8-1ubuntu1.1+esm5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-1ubuntu2.3"}]}],"versions":["1.6.5-1","1.6.7-1","1.6.7-1build1","1.6.7-1ubuntu1","1.6.7-1ubuntu2","1.6.7-1ubuntu2.1","1.6.7-1ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-2ubuntu1.1"}]}],"versions":["1.9.0-2ubuntu1","1.9.0-2ubuntu2","1.9.4-2","1.9.4-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-1ubuntu2.3"}]}],"versions":["1.6.5-1","1.6.7-1","1.6.7-1build1","1.6.7-1ubuntu1","1.6.7-1ubuntu2","1.6.7-1ubuntu2.1","1.6.7-1ubuntu2.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-2ubuntu1.1"}]}],"versions":["1.9.0-2ubuntu1","1.9.0-2ubuntu2","1.9.4-2","1.9.4-2ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libunbound-devel-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-lp151.8.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-lp151.8.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libunbound-devel-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-lp152.9.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-lp152.9.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2-1.2"}]}],"bundled":6}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"nlnetlabs","product":"unbound"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://nlnetlabs.nl/downloads/unbound/CVE-2020-12662_2020-12663.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2020/05/19/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F5NFROI2OMCZLYRTCNGHGO3TUD32LCIQ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2020/dsa-4694","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJ42N2HBZ3DXMSEC56SWIIOFQGOS5M7I/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4374-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00069.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00067.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:19.unbound.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00017.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12663","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F5NFROI2OMCZLYRTCNGHGO3TUD32LCIQ/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJ42N2HBZ3DXMSEC56SWIIOFQGOS5M7I/"},{"url":"https://github.com/advisories/GHSA-rhjg-fh2p-jpv5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-12663","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-12663","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0224.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26646","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2414","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837604","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2414.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12662","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12662","tags":["advisory"]},{"url":"http://www.nxnsattack.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12663","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2416","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2416.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2418","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2418.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2419","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2419.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2640","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2640.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4181","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4181.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201772-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1157268","tags":["report"]},{"url":"https://bugzilla.suse.com/1171889","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12663","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201819-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12663","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/05/19/5","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4374-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12662","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7BOBQ5VCGBBEOIK4YR7ZR7XNQZWV62CU/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T55GJ6QH6PJCNSGR6UDZXXY5UJWCQYT3/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28935","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-12663","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2020-05-19T13:48:46Z","modified":"2024-08-04T12:04:22.545Z","updated_at":"2026-11-02T14:35:53.236501Z"}],"euvd":[{"id":"EUVD-2020-4962","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2020-05-19T13:48:46Z","modified":"2024-08-04T12:04:22Z","updated_at":"2026-11-03T03:07:39.896975Z"}],"ghsa":[{"id":"GHSA-rhjg-fh2p-jpv5","title":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2022-05-24T17:18:08Z","modified":"2023-01-29T05:02:34Z","cwes":["CWE-835"],"updated_at":"2026-11-02T14:45:07.130995Z"}],"nvd":[{"id":"CVE-2020-12663","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2020-05-19T14:15:11.253Z","modified":"2026-06-17T02:52:05.923Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:06:00.784809Z"}],"osv":[{"id":"ALPINE-CVE-2020-12663","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2020-05-19T14:15:11.253Z","modified":"2026-10-26T11:17:55.105476031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"AZL-6930","title":"CVE-2020-12663 affecting package unbound for versions less than 1.10.0-5","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2020-05-19T14:15:11Z","modified":"2026-04-21T04:38:34.688226Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"CVE-2020-12663","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2020-05-19T14:15:11.253Z","modified":"2026-10-24T14:06:19.80800354Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.034736Z"},{"id":"DEBIAN-CVE-2020-12663","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2020-05-19T14:15:11.253Z","modified":"2026-10-26T12:02:25.386011405Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"RHSA-2020:2414","title":"Red Hat Security Advisory: unbound security update","status":"published","published":"2024-09-16T04:23:00Z","modified":"2026-06-27T10:10:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2416","title":"Red Hat Security Advisory: unbound security update","status":"published","published":"2024-09-16T04:22:35Z","modified":"2026-06-27T10:10:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2418","title":"Red Hat Security Advisory: unbound security update","status":"published","published":"2024-09-16T04:22:52Z","modified":"2026-06-27T10:10:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2419","title":"Red Hat Security Advisory: unbound security update","status":"published","published":"2024-09-16T04:22:43Z","modified":"2026-06-27T10:10:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2640","title":"Red Hat Security Advisory: unbound security update","status":"published","published":"2024-09-16T04:23:07Z","modified":"2026-06-27T10:10:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:4181","title":"Red Hat Security Advisory: unbound security update","status":"published","published":"2024-09-16T04:23:14Z","modified":"2026-06-27T10:11:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2020-12663","description":"Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","status":"published","published":"2020-05-19T11:00:00Z","modified":"2026-10-21T16:30:11.536984233Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"DLA-2556-1","title":"unbound1.9 - security update","status":"published","published":"2021-02-12T00:00:00Z","modified":"2026-03-09T01:19:35.342476Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4694-1","title":"unbound - security update","status":"published","published":"2020-05-26T00:00:00Z","modified":"2026-03-09T02:10:45.386115Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0224","title":"Updated unbound packages fix security vulnerabilities","description":"Updated unbound packages fix security vulnerabilities:\n\nUnbound can be tricked into amplifying an incoming query into a\nlarge number of queries directed to a target (CVE-2020-12662).\n\nMalformed answers from upstream name servers can be used to make\nUnbound unresponsive (CVE-2020-12663).\n","status":"published","published":"2020-05-24T18:04:47Z","modified":"2026-04-16T04:43:17.692670062Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0912-1","title":"Security update for unbound","description":"This update for unbound fixes the following issues:\n\n- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying \n  an incoming query into a large number of queries directed to a target (bsc#1171889).\n- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers \n  could have been used to make unbound unresponsive (bsc#1171889).\t  \n- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed \n  code execution after receiving a special crafted answer (bsc#1157268).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-06-29T18:20:25Z","modified":"2026-02-04T02:14:26.518116Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0913-1","title":"Security update for unbound","description":"This update for unbound fixes the following issues:\n\n- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying \n  an incoming query into a large number of queries directed to a target (bsc#1171889).\n- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers \n  could have been used to make unbound unresponsive (bsc#1171889).\t  \n- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed \n  code execution after receiving a special crafted answer (bsc#1157268).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-06-29T18:20:32Z","modified":"2026-02-04T02:20:00.22538Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11005-1","title":"libunbound8-1.13.2-1.2 on GA media","description":"These are all security issues fixed in the libunbound8-1.13.2-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:26:18.219061Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:1772-1","title":"Security update for unbound","description":"This update for unbound fixes the following issues:\n\n- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying \n  an incoming query into a large number of queries directed to a target (bsc#1171889).\n- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers \n  could have been used to make unbound unresponsive (bsc#1171889).\t  \n- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed \n  code execution after receiving a special crafted answer (bsc#1157268).\n","status":"published","published":"2020-06-26T06:05:15Z","modified":"2026-02-04T03:40:15.479853Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1819-1","title":"Security update for unbound","description":"This update for unbound fixes the following issues:\n\t  \n- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying \n  an incoming query into a large number of queries directed to a target (bsc#1171889).\n- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers \n  could have been used to make unbound unresponsive (bsc#1171889).\t  \n- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed \n  code execution after receiving a special crafted answer (bsc#1157268).\n","status":"published","published":"2020-07-01T14:19:58Z","modified":"2026-02-04T02:39:24.796302Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4374-1","title":"unbound vulnerabilities","description":"Lior Shafir, Yehuda Afek, and Anat Bremler-Barr discovered that Unbound\nincorrectly handled certain queries. A remote attacker could use this issue\nto perform an amplification attack directed at a target. (CVE-2020-12662)\n\nIt was discovered that Unbound incorrectly handled certain malformed\nanswers. A remote attacker could possibly use this issue to cause Unbound\nto crash, resulting in a denial of service. (CVE-2020-12663)\n","status":"published","published":"2020-05-27T15:19:10Z","modified":"2026-04-27T15:37:14.665648Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}