USN-5732-1: Unbound vulnerability

Releases

• Ubuntu 22.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• unbound - validating, recursive, caching DNS resolver

Details

It was discovered that Unbound incorrectly handled delegations with a large
number of non-responsive nameservers. A remote attacker could possibly use
this issue to cause Unbound to consume resources, leading to a denial of
service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 22.10

• unbound - 1.16.2-1ubuntu0.1
• libunbound8 - 1.16.2-1ubuntu0.1

Ubuntu 22.04

• unbound - 1.13.1-1ubuntu5.3
• libunbound8 - 1.13.1-1ubuntu5.3

Ubuntu 20.04

• unbound - 1.9.4-2ubuntu1.4
• libunbound8 - 1.9.4-2ubuntu1.4

Ubuntu 18.04

• libunbound2 - 1.6.7-1ubuntu2.6
• unbound - 1.6.7-1ubuntu2.6

In general, a standard system update will make all the necessary changes.

References

• CVE-2022-3204