PT-2020-6083 · Nlnet+2 · Unbound+2

Published 2020-06-10 · Updated 2020-12-09 · CVE-2020-10772

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Unbound (affected versions not specified)

Description The issue is related to an uncontrolled resource consumption in the Unbound DNS server. It can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-406

CWE-400

Related Identifiers

BDU:2021-02946

CESA-2020_2642

CVE-2020-10772

RHSA-2020:2642

RHSA-2020_2642

Affected Products

Centos

Red Hat

Unbound

References · 11

• https://linux.oracle.com/errata/ELSA-2020-2642.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10772 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10772 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02946 · Security Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11176&cat=SIRT_1&actp=LIST&showDraft=false · Note
• https://access.redhat.com/errata/RHSA-2020:2642 · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11176&cat=SIRT_1&actp=LIST&showDraft=false · Note
• https://t.me/cibsecurity/17446 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=1846026 · Note
• https://t.me/cibsecurity/16901 · Telegram Post
• https://t.me/cvenotify/6552 · Telegram Post