CVE-2020-10772

An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound that shipped before the mentioned erratum. This issue is about the incomplete fix for CVE-2020-12662, and it does not affect upstream versions of Unbound.

An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound that shipped before the mentioned erratum. This issue is about the incomplete fix for CVE-2020-12662, and it does not affect upstream versions of Unbound.

Una corrección incompleta fue entregada para CVE-2020-12662 para Unbound en Red Hat Enterprise Linux versión 7, como parte de la errata de RHSA-2020: 2414. Las versiones vulnerables de Unbound aún podrían amplificar una consulta entrante en una gran cantidad de consultas dirigidas a un objetivo, inclusive con un índice de amplificación más bajo en comparación con las versiones de Unbound que se enviaron antes de la errata mencionada. Este problema se trata de la corrección incompleta para el CVE-2020-12662 y no afecta a las versiones anteriores de Unbound