CVE catalog

CVE-2025-11411

Unbound regression

Severity: Medium · CVSS 6.9CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L
Published: Oct 22, 2025, 12:28:02 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.33% · Oct 25, 2026

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are used to update the resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their respective address records) from replies mitigating the possible poison effect. Unbound 1.24.2 includes an additional fix that scrubs unsolicited NS RRSets (and their respective address records) from YXDOMAIN and non-referral nodata replies, further mitigating the possible poison effect.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	unbound	sid	`1.26.2-1`	fixed
Debian	unbound	forky	`1.26.2-1`	fixed
Debian	unbound	trixie	`1.22.0-2+deb13u3`	fixed
Debian	unbound	trixie-security	`1.26.2-0+deb13u1`	fixed
Debian	unbound	bookworm	`1.17.1-2+deb12u4`	fixed
Debian	unbound	bookworm-security	`1.17.1-2+deb12u3`	vulnerable
Ubuntu	unbound	noble	`1.19.2-1ubuntu3.7`	fixed
Ubuntu	libunbound-dev	noble	`1.19.2-1ubuntu3.7`	fixed
Ubuntu	libunbound8	noble	`1.19.2-1ubuntu3.7`	fixed
Ubuntu	python3-unbound	noble	`1.19.2-1ubuntu3.7`	fixed
Ubuntu	unbound-anchor	noble	`1.19.2-1ubuntu3.7`	fixed
Ubuntu	unbound-host	noble	`1.19.2-1ubuntu3.7`	fixed
Ubuntu	unbound	noble	`1.19.2-1ubuntu3.6`	fixed
Ubuntu	libunbound-dev	noble	`1.19.2-1ubuntu3.6`	fixed
Ubuntu	libunbound8	noble	`1.19.2-1ubuntu3.6`	fixed
Ubuntu	python3-unbound	noble	`1.19.2-1ubuntu3.6`	fixed
Ubuntu	unbound-anchor	noble	`1.19.2-1ubuntu3.6`	fixed
Ubuntu	unbound-host	noble	`1.19.2-1ubuntu3.6`	fixed
Ubuntu	unbound	pro	`1.9.0-2ubuntu1`	vulnerable
Ubuntu	unbound	pro	`1.9.0-2ubuntu2`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.1`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.2`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.3`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.4`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.5`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.6`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.8`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.9`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.11`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.11+esm1`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.11+esm2`	vulnerable
Ubuntu	unbound	pro	`1.9.4-2ubuntu1.11+esm3`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu1`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu3`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.1`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.2`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.3`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.4`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.5`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.7`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.8`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.10`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.11`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.12`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.13`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.14`	fixed
Ubuntu	unbound	24.04	`1.17.1-2`	vulnerable
Ubuntu	unbound	24.04	`1.18.0-2ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.18.0-2ubuntu2`	vulnerable
Ubuntu	unbound	24.04	`1.19.1-1ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.2`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.3`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.4`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.5`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.6`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.7`	fixed
Ubuntu	unbound	25.10	`1.22.0-1ubuntu1`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu1`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu2`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu2.1`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu2.2`	fixed
Ubuntu	unbound	26.04	`1.22.0-2ubuntu2`	vulnerable
Ubuntu	unbound	26.04	`1.22.0-2ubuntu4`	vulnerable
Ubuntu	unbound	26.04	`1.24.2-1ubuntu1`	fixed
Alpine	unbound	3.19	`1.20.0-r2`	fixed
Alpine	unbound	3.20	`1.20.0-r2`	fixed
Alpine	unbound	3.21	`1.22.0-r1`	fixed
Alpine	unbound	3.22	`1.23.1-r1`	fixed
Alpine	unbound	3.23	`1.24.1-r0`	fixed
Alpine	unbound	3.24	`1.24.1-r0`	fixed
Ubuntu	unbound	22.04	`1.13.1-1ubuntu1`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu3`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.1`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.2`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.3`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.4`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.5`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.7`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.8`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.10`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.11`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.12`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.13`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.14`	fixed
Ubuntu	unbound	24.04	`1.17.1-2`	vulnerable
Ubuntu	unbound	24.04	`1.18.0-2ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.18.0-2ubuntu2`	vulnerable
Ubuntu	unbound	24.04	`1.19.1-1ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.2`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.3`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.4`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.5`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.6`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.7`	fixed
Ubuntu	unbound	25.10	`1.22.0-1ubuntu1`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu1`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu2`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu2.1`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu2.2`	fixed
Ubuntu	unbound	22.04	`1.13.1-1ubuntu1`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu3`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.1`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.2`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.3`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.4`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.5`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.7`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.8`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.10`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.11`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.12`	vulnerable
Ubuntu	unbound	22.04	`1.13.1-1ubuntu5.13`	fixed
Ubuntu	unbound	24.04	`1.17.1-2`	vulnerable
Ubuntu	unbound	24.04	`1.18.0-2ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.18.0-2ubuntu2`	vulnerable
Ubuntu	unbound	24.04	`1.19.1-1ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.1`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.2`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.3`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.4`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.5`	vulnerable
Ubuntu	unbound	24.04	`1.19.2-1ubuntu3.6`	fixed
Ubuntu	unbound	25.10	`1.22.0-1ubuntu1`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu1`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu2`	vulnerable
Ubuntu	unbound	25.10	`1.22.0-2ubuntu2.1`	fixed
Opensuse	unbound	leap 16.0	`1.24.1-160000.1.1`	fixed
Opensuse	unbound	tumbleweed	`1.24.1-1.1`	fixed
Suse	unbound	linux enterprise server 16.0	`1.24.1-160000.1.1`	fixed
Suse	unbound	linux enterprise server for sap applications 16.0	`1.24.1-160000.1.1`	fixed
Suse	unbound	linux micro 6.2	`1.24.1-160000.1.1`	fixed
Suse	unbound	linux enterprise micro 5.5	`1.20.0-150100.10.22.1`	fixed
Suse	unbound	linux micro 6.1	`1.22.0-slfo.1.1_3.1`	fixed
Suse	unbound	linux micro 6.0	`1.22.0-2.1`	fixed
Suse	unbound	linux enterprise module for basesystem 15 sp6	`1.20.0-150600.23.13.1`	fixed
Suse	unbound	linux enterprise module for basesystem 15 sp7	`1.20.0-150600.23.13.1`	fixed
Suse	unbound	linux enterprise module for package hub 15 sp6	`1.20.0-150600.23.13.1`	fixed
Suse	unbound	linux enterprise module for package hub 15 sp7	`1.20.0-150600.23.13.1`	fixed
Opensuse	unbound	leap 15.6	`1.20.0-150600.23.13.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	unbound	source	sid	`1.24.2-1`	not yet assigned	Not reported	Not reported
Debian	unbound	source	forky	`1.24.2-1`	not yet assigned	Not reported	Not reported
Debian	unbound	source	trixie	`1.22.0-2+deb13u1`	not yet assigned	Not reported	Not reported
Debian	unbound	source	bookworm	`1.17.1-2+deb12u4`	not yet assigned	Not reported	Not reported
Ubuntu	unbound	deb	noble	`1.19.2-1ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	libunbound-dev	deb	noble	`1.19.2-1ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	libunbound8	deb	noble	`1.19.2-1ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	python3-unbound	deb	noble	`1.19.2-1ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	unbound-anchor	deb	noble	`1.19.2-1ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	unbound-host	deb	noble	`1.19.2-1ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	unbound	deb	noble	`1.19.2-1ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	libunbound-dev	deb	noble	`1.19.2-1ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	libunbound8	deb	noble	`1.19.2-1ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	python3-unbound	deb	noble	`1.19.2-1ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	unbound-anchor	deb	noble	`1.19.2-1ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	unbound-host	deb	noble	`1.19.2-1ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	unbound	deb	22.04	`1.13.1-1ubuntu5.14`	Not reported	UBUNTU-CVE-2025-11411	Not reported
Ubuntu	unbound	deb	24.04	`1.19.2-1ubuntu3.7`	Not reported	UBUNTU-CVE-2025-11411	Not reported
Ubuntu	unbound	deb	25.10	`1.22.0-2ubuntu2.2`	Not reported	UBUNTU-CVE-2025-11411	Not reported
Ubuntu	unbound	deb	26.04	`1.24.2-1ubuntu1`	Not reported	UBUNTU-CVE-2025-11411	Not reported
Alpine	unbound	apk	3.19	`1.20.0-r2`	Not reported	ALPINE-CVE-2025-11411	Not reported
Alpine	unbound	apk	3.20	`1.20.0-r2`	Not reported	ALPINE-CVE-2025-11411	Not reported
Alpine	unbound	apk	3.21	`1.22.0-r1`	Not reported	ALPINE-CVE-2025-11411	Not reported
Alpine	unbound	apk	3.22	`1.23.1-r1`	Not reported	ALPINE-CVE-2025-11411	Not reported
Alpine	unbound	apk	3.23	`1.24.1-r0`	Not reported	ALPINE-CVE-2025-11411	Not reported
Alpine	unbound	apk	3.24	`1.24.1-r0`	Not reported	ALPINE-CVE-2025-11411	Not reported
Ubuntu	unbound	deb	22.04	`1.13.1-1ubuntu5.14`	Not reported	USN-7855-2	Not reported
Ubuntu	unbound	deb	24.04	`1.19.2-1ubuntu3.7`	Not reported	USN-7855-2	Not reported
Ubuntu	unbound	deb	25.10	`1.22.0-2ubuntu2.2`	Not reported	USN-7855-2	Not reported
Ubuntu	unbound	deb	22.04	`1.13.1-1ubuntu5.13`	Not reported	USN-7855-1	Not reported
Ubuntu	unbound	deb	24.04	`1.19.2-1ubuntu3.6`	Not reported	USN-7855-1	Not reported
Ubuntu	unbound	deb	25.10	`1.22.0-2ubuntu2.1`	Not reported	USN-7855-1	Not reported
Opensuse	unbound	rpm	leap 16.0	`1.24.1-160000.1.1`	Not reported	OPENSUSE-SU-2026:20139-1	Not reported
Opensuse	unbound	rpm	tumbleweed	`1.24.1-1.1`	Not reported	OPENSUSE-SU-2025:15668-1	Not reported
Suse	unbound	rpm	linux enterprise server 16.0	`1.24.1-160000.1.1`	Not reported	SUSE-SU-2026:20201-1	Not reported
Suse	unbound	rpm	linux enterprise server for sap applications 16.0	`1.24.1-160000.1.1`	Not reported	SUSE-SU-2026:20201-1	Not reported
Suse	unbound	rpm	linux micro 6.2	`1.24.1-160000.1.1`	Not reported	SUSE-SU-2026:20180-1	Not reported
Suse	unbound	rpm	linux enterprise micro 5.5	`1.20.0-150100.10.22.1`	Not reported	SUSE-SU-2025:4391-1	Not reported
Suse	unbound	rpm	linux micro 6.1	`1.22.0-slfo.1.1_3.1`	Not reported	SUSE-SU-2025:21065-1	Not reported
Suse	unbound	rpm	linux micro 6.0	`1.22.0-2.1`	Not reported	SUSE-SU-2025:21050-1	Not reported
Suse	unbound	rpm	linux enterprise module for basesystem 15 sp6	`1.20.0-150600.23.13.1`	Not reported	SUSE-SU-2025:4134-1	Not reported
Suse	unbound	rpm	linux enterprise module for basesystem 15 sp7	`1.20.0-150600.23.13.1`	Not reported	SUSE-SU-2025:4134-1	Not reported
Suse	unbound	rpm	linux enterprise module for package hub 15 sp6	`1.20.0-150600.23.13.1`	Not reported	SUSE-SU-2025:4134-1	Not reported
Suse	unbound	rpm	linux enterprise module for package hub 15 sp7	`1.20.0-150600.23.13.1`	Not reported	SUSE-SU-2025:4134-1	Not reported
Opensuse	unbound	rpm	leap 15.6	`1.20.0-150600.23.13.1`	Not reported	SUSE-SU-2025:4134-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libunbound8]Affected
Source package: [unbound]
Details (4)
- 1.17.1-2+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · amd64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · arm64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
[libunbound-dev]Affected
Source package: [unbound]
Details (4)
- 1.17.1-2+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · amd64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · arm64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
[python3-unbound]Affected
Source package: [unbound]
Details (4)
- 1.17.1-2+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · amd64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · arm64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
[unbound]Affected
Details (4)
- 1.17.1-2+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · amd64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · arm64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
[unbound-anchor]Affected
Source package: [unbound]
Details (4)
- 1.17.1-2+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · amd64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · arm64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
[unbound-host]Affected
Source package: [unbound]
Details (4)
- 1.17.1-2+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · amd64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12
- 1.17.1-2+deb12u3 · arm64 · bookworm-security
  Affected · Fixed: 1.17.1-2+deb12u4
  usn · unbound · debian · bookworm; usn · unbound · debian · 12

[openSUSE Tumbleweed]

[libunbound8]Unknown
Source package: [unbound]
Details (1)
- 1.26.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.1-1.1
  Version impact unknown
  usn · unbound · opensuse · tumbleweed
[python3-unbound]Unknown
Source package: [unbound]
Details (1)
- 1.26.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.1-1.1
  Version impact unknown
  usn · unbound · opensuse · tumbleweed
[unbound-anchor]Unknown
Source package: [unbound]
Details (1)
- 1.26.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.1-1.1
  Version impact unknown
  usn · unbound · opensuse · tumbleweed
[unbound-devel]Unknown
Source package: [unbound]
Details (1)
- 1.26.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.1-1.1
  Version impact unknown
  usn · unbound · opensuse · tumbleweed
[unbound-munin]Unknown
Source package: [unbound]
Details (1)
- 1.26.0-2.1 · noarch · tumbleweed
  Unknown · Fixed: 1.24.1-1.1
  Version impact unknown
  usn · unbound · opensuse · tumbleweed
[unbound]Fixed
Source package: [unbound]
Details (1)
- 1.26.0-2.1 · x86_64 · tumbleweed
  Fixed · Fixed: 1.24.1-1.1
  usn · unbound · opensuse · tumbleweed

[Debian 13 (Trixie)]

[libunbound8]Fixed
Source package: [unbound]
Details (6)
- 1.22.0-2+deb13u3 · amd64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.2-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
[libunbound-dev]Fixed
Source package: [unbound]
Details (6)
- 1.22.0-2+deb13u3 · amd64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.2-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
[python3-unbound]Fixed
Source package: [unbound]
Details (6)
- 1.22.0-2+deb13u3 · amd64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.2-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
[unbound]Fixed
Details (6)
- 1.22.0-2+deb13u3 · amd64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.2-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
[unbound-anchor]Fixed
Source package: [unbound]
Details (6)
- 1.22.0-2+deb13u3 · amd64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.2-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
[unbound-host]Fixed
Source package: [unbound]
Details (6)
- 1.22.0-2+deb13u3 · amd64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.22.0-2+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13
- 1.26.2-0+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 1.22.0-2+deb13u1
  usn · unbound · debian · 13

Observed: Oct 27, 2026, 11:26:08 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]