HIGH 7.5 Microsoft
CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Microsoft Security Update 2020-May: Unbound before 1.10.1 has Insufficient Control of Network Message Volume aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Affected Products
- cm1 unbound 1.10.0-3 on CBL Mariner 1.0
- cbl2 unbound 1.10.0-5 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-12662
- https://nvd.nist.gov/vuln/detail/CVE-2020-12662
This high severity vulnerability with a CVSS score of 7.5 was published on 2020-05-12 via Microsoft. Affected: cm1 unbound 1.10.0-3 on CBL Mariner 1.0, cbl2 unbound 1.10.0-5 on CBL Mariner 2.0.
vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.