Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
Weakness
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unbound | Nlnetlabs | * | 1.9.5 (excluding) |
| Red Hat Enterprise Linux 8 | RedHat | unbound-0:1.7.3-15.el8 | * |
| Red Hat Enterprise Linux 8.2 Extended Update Support | RedHat | unbound-0:1.7.3-12.el8_2 | * |
| Unbound | Ubuntu | bionic | * |
| Unbound | Ubuntu | esm-infra/bionic | * |
| Unbound | Ubuntu | esm-infra/focal | * |
| Unbound | Ubuntu | focal | * |
| Unbound | Ubuntu | trusty | * |
| Unbound | Ubuntu | upstream | * |
| Unbound | Ubuntu | xenial | * |
References
- https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html
- https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/
- https://security.netapp.com/advisory/ntap-20210507-0007/
- https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html
- https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/
- https://security.netapp.com/advisory/ntap-20210507-0007/