Most recent entries from all

ALSA-2025:11849 — Important: unbound security update

Affected: AlmaLinux:9: python3-unbound, AlmaLinux:9: unbound, AlmaLinux:9: unbound-devel, AlmaLinux:9: unbound-dracut, AlmaLinux:9: unbound-libs

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound Cache poisoning (CVE-2025-5994)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-12600

certfr-2025-avi-0789 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2025-avi-0789

CLEANSTART-2026-NH76134 — Security fix for CVE-2025-5994 applied in: coredns 1.14.0-r0

Affected: CleanStart: coredns

Security vulnerability affects the coredns package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-257581

fkie_cve-2025-5994

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous replies.

GHSA-xrv5-2wwg-jp3r

msrc_CVE-2025-5994 — Cache poisoning via the ECS-enabled Rebirthday Attack

msrc_CVE-2025-5994

OESA-2025-1974 — unbound security update

Affected: openEuler:22.03-LTS-SP3: unbound, openEuler:22.03-LTS-SP4: unbound, openEuler:24.03-LTS: unbound, openEuler:24.03-LTS-SP1: unbound, openEuler:24.03-LTS-SP2: unbound, openEuler:20.03-LTS-SP4: unbound

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn&apos;t make custom builds or provide specific features to paying customers only. Security Fix(es):

NLnet Unbound is an open source DNS server for the Netherlands NLnet team. NLnet Unbound has a security vulnerability that originates from the risk of cache poisoning when supporting EDNS Client Subnet, which may lead to Rebirthday attacks.(CVE-2025-5994)

openSUSE-SU-2025:15435-1 — libunbound8-1.23.1-1.1 on GA media

libunbound8-1.23.1-1.1 on GA media

RHSA-2025:12064 — Red Hat Security Advisory: unbound security update

unbound: Unbound Cache poisoning

RLSA-2025:11884 — Important: unbound security update

Affected: Rocky Linux:8: unbound

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound Cache poisoning (CVE-2025-5994)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2025-5994

Affected: Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:25.10: unbound

WID-SEC-W-2025-1656 — Red Hat Enterprise Linux (unbound): Schwachstelle ermöglicht Manipulation von Daten

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (unbound) ausnutzen, um Daten zu manipulieren.