VDB
ALPINE-CVE-2020-12662
ALPINE-CVE-2020-12662
PUBLISHED
CVSS 7.5 HIGH
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.21 | unbound | 0, 0, 0 |
| Alpine:v3.16 | unbound | 1.6.7-r2, 0, 0 |
| Alpine:v3.13 | unbound | 1.6.7-r1, 1.9.4-r1, 1.9.4-r0 |
| Alpine:v3.24 | unbound | 0, 0, 0 |
| Alpine:v3.11 | unbound | 1.4.20-r0, 1.5.1-r0, 1.4.22-r0 |
| Alpine:v3.18 | unbound | 0, 0, 1.10.0-r0 |
| Alpine:v3.14 | unbound | 1.5.10-r0, 1.5.10-r1, 1.5.10-r2 |
| Alpine:v3.23 | unbound | 1.5.6-r3, 0, 0 |
| Alpine:v3.22 | unbound | 1.4.13-r3, 0, 0 |
| Alpine:v3.9 | unbound | 1.4.10-r2, 0, 0 |
| Alpine:v3.20 | unbound | 0, 1.9.6-r0, 1.9.5-r3 |
| Alpine:v3.12 | unbound | 1.4.10-r3, 1.5.4-r0, 0 |
| Alpine:v3.19 | unbound | 1.4.13-r2, 0, 1.10.0-r0 |
| Alpine:v3.15 | unbound | 1.4.21-r0, 1.4.21-r1, 1.4.21-r2 |
| Alpine:v3.10 | unbound | 1.4.21-r0, 1.4.21-r1, 1.4.22-r0 |
| Alpine:v3.17 | unbound | 1.4.13-r2, 1.4.13-r3, 1.4.14-r0 |
Timeline
- May 19, 2020 CVE Published
- Aug 5, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch