VDB

GCVE-110-MAGEIA-2018-91

GCVE-110-MAGEIA-2018-91
Advisory Published
Vulnetix · Advisory published January 22, 2018
Updated unbound packages to fix security vulnerability (CVE-2017-15105) in the processing of wildcard synthesized NSEC records. While synthesis of NSEC records is allowed by RFC4592, these synthesized owner names should not be used in the NSEC processing. This was, however, happenning in Unbound 1.6.7 and earlier versions.

Affected Products

VendorProductVersionsPlatforms
Mageiaunbound0 (affected), 1.6.8-1.mga6 (unaffected), 0 (affected), 1.6.8-1.mga6 (unaffected)—
Mageiaqelectrotech0 (affected), 0.6-1.mga6 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›