CVE-2017-15105

5

MEDIUMCVSS v2

Published

January 23, 2018

Affected

1 project

Assigned by

Red Hat

Severity scale

010

Description

A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.

NLnetLabs/unbound

GitHubUnbound is a validating, recursive, and caching DNS resolver.

< 1.6.8NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2017-15105

Description

More on this CVE