Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Unbound DNS service may crash due to name compression
published 1 year ago
Summary
The Unbound DNS resolver packages on AlmaLinux can be forced into a condition where they stop working, disrupting domain name lookups for users and applications. This happens because the software does not properly limit the size of compressed names it processes. Update the affected Unbound packages to the latest versions supplied by AlmaLinux to prevent the service interruption.
What to do
- Update almalinux python3-unbound to version 1.20.0-10.el10_0.
- Update almalinux unbound to version 1.20.0-10.el10_0.
- Update almalinux unbound-anchor to version 1.20.0-10.el10_0.
- Update almalinux unbound-devel to version 1.20.0-10.el10_0.
- Update almalinux unbound-dracut to version 1.20.0-10.el10_0.
- Update almalinux unbound-libs to version 1.20.0-10.el10_0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:10 | almalinux | python3-unbound |
< 1.20.0-10.el10_0 Fix: upgrade to 1.20.0-10.el10_0
|
| AlmaLinux:10 | almalinux | unbound |
< 1.20.0-10.el10_0 Fix: upgrade to 1.20.0-10.el10_0
|
| AlmaLinux:10 | almalinux | unbound-anchor |
< 1.20.0-10.el10_0 Fix: upgrade to 1.20.0-10.el10_0
|
| AlmaLinux:10 | almalinux | unbound-devel |
< 1.20.0-10.el10_0 Fix: upgrade to 1.20.0-10.el10_0
|
| AlmaLinux:10 | almalinux | unbound-dracut |
< 1.20.0-10.el10_0 Fix: upgrade to 1.20.0-10.el10_0
|
| AlmaLinux:10 | almalinux | unbound-libs |
< 1.20.0-10.el10_0 Fix: upgrade to 1.20.0-10.el10_0
|
Original advisory text
Moderate: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.
Security Fix(es):
* unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* unbound: Unbounded name compression could lead to Denial of Service (CVE-2024-8508)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2025:8047 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-8508 Third Party Advisory
- https://bugzilla.redhat.com/2316321 Third Party Advisory
- https://errata.almalinux.org/10/ALSA-2025-8047.html Vendor Advisory
Timeline
Published20 May 2025
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2025:8047 · OSV
Track software like this
Free during beta