Software Update: Unbound 1.10.1

When you perform a dns lookup, a recursor initially starts asking the lookup query to a dns root server. This can then redirect to other servers, from where it can redirect to other servers and so on, until finally a server is reached that knows the answer or knows that the look-up is not possible. The latter can be the case if the name does not exist or the servers do not respond. The process of going through different authoritative servers is called recursion. Unbound is a dns recursor with support for modern standards such as Query Name Minimization, Aggressive Use of Dnssec-Validated Cache and authority zones. The developers released version 1.10.1 a few days ago and fixes two security vulnerabilities:

Bug Fixes

• CVE-2020-12662 Unbound can be tricked into amplifying an incoming query into a large number of queries directed to a target.
• CVE-2020-12663 Malformed answers from upstream name servers can be used to make Unbound unresponsive.