Security Advisory

CVE-2017-15105

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-01-23 16:00:00
Last updated 2024-09-16 21:56:27
Assigner redhat
State PUBLISHED

Description

A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.