The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the "DNSBomb" issue.

The version of unbound installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-33655 advisory.

  - The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource     consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later     sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the DNSBomb     issue. (CVE-2024-33655)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the unbound package has been released.

The version of unbound installed on the remote host is prior to 1.13.1-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-2024-001 advisory.

    An issue was discovered in some DNS recursive resolvers that allows remote attackers to cause a denial of     service using a maliciously designed authority and response amplification. (CVE-2024-33655)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6791-1 advisory.

    It was discovered that Unbound could take part in a denial of service amplification attack known as     DNSBomb. This update introduces certain resource limits to make the impact from Unbound significantly     lower.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-68626e0eb5 advisory.

    # Unbound 1.20.0

    - https://github.com/NLnetLabs/unbound/releases/tag/release-1.20.0
    - DNSBomb limitation fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-9df760819c advisory.

    # Unbound 1.20.0

    - https://github.com/NLnetLabs/unbound/releases/tag/release-1.20.0
    - DNSBomb limitation fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2536 advisory.

  - unbound: DNSBomb vulnerability (CVE-2024-33655)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-610 advisory.

  - unbound: DNSBomb vulnerability (CVE-2024-33655)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of unbound installed on the remote host is prior to 1.6.6-1.6. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1934 advisory.

  - unbound: DNSBomb vulnerability (CVE-2024-33655)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
208760	CBL Mariner 2.0 Security Update: unbound (CVE-2024-33655)	Nessus	MarinerOS Local Security Checks	high
206731	Photon OS 4.0: Unbound PHSA-2024-4.0-0677	Nessus	PhotonOS Local Security Checks	high
206726	Photon OS 5.0: Unbound PHSA-2024-5.0-0357	Nessus	PhotonOS Local Security Checks	high
206558	Photon OS 3.0: Unbound PHSA-2024-3.0-0789	Nessus	PhotonOS Local Security Checks	high
198249	Amazon Linux 2 : unbound (ALASUNBOUND-2024-001)	Nessus	Amazon Linux Local Security Checks	high
198046	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Unbound vulnerability (USN-6791-1)	Nessus	Ubuntu Local Security Checks	high
197714	Fedora 40 : unbound (2024-68626e0eb5)	Nessus	Fedora Local Security Checks	high
197709	Fedora 39 : unbound (2024-9df760819c)	Nessus	Fedora Local Security Checks	high
197106	Amazon Linux 2 : unbound (ALAS-2024-2536)	Nessus	Amazon Linux Local Security Checks	high
196924	Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2024-610)	Nessus	Amazon Linux Local Security Checks	high
196917	Amazon Linux AMI : unbound (ALAS-2024-1934)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2024-33655

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high