CVE-2020-12663

CVE	CVE-2020-12663
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-05-19 14:15:00 UTC
Updated	2023-11-07 03:15:00 UTC
Description	Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

Problem Types: CWE-835

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Canonical	Ubuntu Linux	18.04	All	All	All
Operating System	Canonical	Ubuntu Linux	19.10	All	All	All
Operating System	Canonical	Ubuntu Linux	20.04	All	All	All
Operating System	Canonical	Ubuntu Linux	18.04	All	All	All
Operating System	Canonical	Ubuntu Linux	19.10	All	All	All
Operating System	Canonical	Ubuntu Linux	20.04	All	All	All
Operating System	Debian	Debian Linux	10.0	All	All	All
Operating System	Debian	Debian Linux	9.0	All	All	All
Operating System	Debian	Debian Linux	10.0	All	All	All
Operating System	Debian	Debian Linux	9.0	All	All	All
Operating System	Fedoraproject	Fedora	31	All	All	All
Operating System	Fedoraproject	Fedora	32	All	All	All
Operating System	Fedoraproject	Fedora	31	All	All	All
Operating System	Fedoraproject	Fedora	32	All	All	All
Application	Nlnetlabs	Unbound	All	All	All	All
Application	Nlnetlabs	Unbound	All	All	All	All
Operating System	Opensuse	Leap	15.1	All	All	All
Operating System	Opensuse	Leap	15.2	All	All	All
Operating System	Opensuse	Leap	15.1	All	All	All
Operating System	Opensuse	Leap	15.2	All	All	All

Reference	Source	Link	Tags
Debian -- Security Information -- DSA-4694-1 unbound	DEBIAN	www.debian.org	Third Party Advisory
[security-announce] openSUSE-SU-2020:0912-1: important: Security update	SUSE	lists.opensuse.org	Mailing List, Third Party Advisory
[SECURITY] Fedora 31 Update: unbound-1.10.1-1.fc31 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org	Third Party Advisory
USN-4374-1: Unbound vulnerabilities \| Ubuntu security notices \| Ubuntu	UBUNTU	usn.ubuntu.com	Third Party Advisory
[SECURITY] [DLA 2556-1] unbound1.9 security update	MLIST	lists.debian.org	Mailing List, Third Party Advisory
oss-security - Unbound - CVE-2020-12662, CVE-2020-12663	MLIST	www.openwall.com	Mailing List, Patch, Third Party Advisory
FreeBSD-SA-20:19	FREEBSD	security.FreeBSD.org	Third Party Advisory
[SECURITY] Fedora 31 Update: unbound-1.10.1-1.fc31 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
nlnetlabs.nl/downloads/unbound/CVE-2020-12662_2020-12663.txt	CONFIRM	nlnetlabs.nl	Vendor Advisory
[security-announce] openSUSE-SU-2020:0913-1: important: Security update	SUSE	lists.opensuse.org	Mailing List, Third Party Advisory
[SECURITY] Fedora 32 Update: unbound-1.10.1-1.fc32 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org	Third Party Advisory
[SECURITY] Fedora 32 Update: unbound-1.10.1-1.fc32 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

375488 F5 BIG-IP Unbound DNS Cache Vulnerabilities(K37661551)
377036 Alibaba Cloud Linux Security Update for unbound (ALINUX2-SA-2020:0100)
500706 Alpine Linux Security Update for unbound
504479 Alpine Linux Security Update for unbound
900117 CBL-Mariner Linux Security Update for unbound 1.10.0
901444 Common Base Linux Mariner (CBL-Mariner) Security Update for unbound (6930-1)
903169 Common Base Linux Mariner (CBL-Mariner) Security Update for unbound (2549)
905796 Common Base Linux Mariner (CBL-Mariner) Security Update for unbound (2549-1)