CLSA-2024-1734532058
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2024-1734532058.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2024-1734532058
- Upstream
- Published
- 2024-12-18T14:27:45Z
- Modified
- 2026-06-01T00:30:04.421547526Z
- Summary
- unbound: Fix of 2 CVEs
- Details
-
- CVE-2023-50387: Evaluate DNSSEC responses to prevent KeyTrap denial of service issue.
- CVE-2023-50868: Fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks
- References
Affected packages
TuxCare:AlmaLinux:9.2 / python3-unbound
Package
- Name
- python3-unbound
- Purl
- pkg:rpm/tuxcare/python3-unbound?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / unbound
Package
- Name
- unbound
- Purl
- pkg:rpm/tuxcare/unbound?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / unbound-devel
Package
- Name
- unbound-devel
- Purl
- pkg:rpm/tuxcare/unbound-devel?distro=almalinux-9.2