Approved changes feed: RSS · Atom

cpe:2.3:a:nlnetlabs:unbound:1.6.6-5:*:*:*:*:*:*:*

part: a version: 1.6.6-5 update: *

VendorNlnetlabs (8b1a4e66-a9d8-56c4-ab0e-8a1df5313bb8)
ProductUnbound (0a834c0d-135b-5552-89e9-8a2c2d8ab3c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/unbound purl2cpe 2026-06-01 10:16:51.618574
pkg:deb/ubuntu/unbound purl2cpe 2026-06-01 10:16:51.618576
pkg:github/nlnetlabs/unbound purl2cpe 2026-06-01 10:16:51.618578
pkg:nlnetlabs/unbound purl2cpe 2026-06-01 10:16:51.618580
pkg:rpm/opensuse/unbound purl2cpe 2026-06-01 10:16:51.618582

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10772 vulnerable 2026-06-08 05:16:35.864897 Details available
An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound that shipped before the mentioned erratum. This issue is about the incomplete fix for CVE-2020-12662, and it does not affect upstream versions of Unbound.
Published: 2020-11-27T17:40:05.000Z
Updated: 2024-08-04T11:14:15.485Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.