CVE-2017-15105 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-15105 Interim 1 29 2023-06-13T01:03:13Z current 2021-05-30T14:02:52Z 2023-06-13T01:03:13Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-15105 A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Tumbleweed libunbound2-1.6.8-1.34 libunbound2-1.6.8-10.3.1 libunbound2-1.6.8-10.6.1 libunbound2-1.6.8-150100.10.8.1 libunbound2-1.6.8-8.3 libunbound2-1.6.8-lp150.1.4 libunbound2-1.6.8-lp152.8.9 libunbound8-1.13.2-1.2 python3-unbound-1.13.2-1.2 unbound-1.13.2-1.2 unbound-anchor-1.13.2-1.2 unbound-anchor-1.6.8-1.34 unbound-anchor-1.6.8-10.3.1 unbound-anchor-1.6.8-10.6.1 unbound-anchor-1.6.8-150100.10.8.1 unbound-anchor-1.6.8-8.3 unbound-anchor-1.6.8-lp150.1.4 unbound-anchor-1.6.8-lp152.8.9 unbound-devel-1.13.2-1.2 unbound-devel-1.6.8-1.34 unbound-devel-1.6.8-10.3.1 unbound-devel-1.6.8-10.6.1 unbound-devel-1.6.8-150100.10.8.1 unbound-devel-1.6.8-8.3 unbound-munin-1.13.2-1.2 libunbound2-1.6.8-1.34 as a component of SUSE Linux Enterprise Module for Basesystem 15 unbound-anchor-1.6.8-1.34 as a component of SUSE Linux Enterprise Module for Basesystem 15 unbound-devel-1.6.8-1.34 as a component of SUSE Linux Enterprise Module for Basesystem 15 libunbound2-1.6.8-8.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 unbound-anchor-1.6.8-8.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 unbound-devel-1.6.8-8.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libunbound2-1.6.8-8.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 unbound-anchor-1.6.8-8.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 unbound-devel-1.6.8-8.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libunbound2-1.6.8-10.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 unbound-anchor-1.6.8-10.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 unbound-devel-1.6.8-10.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libunbound2-1.6.8-10.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 unbound-anchor-1.6.8-10.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 unbound-devel-1.6.8-10.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libunbound2-1.6.8-150100.10.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound-anchor-1.6.8-150100.10.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 unbound-devel-1.6.8-150100.10.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libunbound2-1.6.8-lp150.1.4 as a component of openSUSE Leap 15.0 unbound-anchor-1.6.8-lp150.1.4 as a component of openSUSE Leap 15.0 libunbound2-1.6.8-lp152.8.9 as a component of openSUSE Leap 15.2 unbound-anchor-1.6.8-lp152.8.9 as a component of openSUSE Leap 15.2 libunbound8-1.13.2-1.2 as a component of openSUSE Tumbleweed python3-unbound-1.13.2-1.2 as a component of openSUSE Tumbleweed unbound-1.13.2-1.2 as a component of openSUSE Tumbleweed unbound-anchor-1.13.2-1.2 as a component of openSUSE Tumbleweed unbound-devel-1.13.2-1.2 as a component of openSUSE Tumbleweed unbound-munin-1.13.2-1.2 as a component of openSUSE Tumbleweed A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof. CVE-2017-15105 SUSE Linux Enterprise Module for Basesystem 15:libunbound2-1.6.8-1.34 SUSE Linux Enterprise Module for Basesystem 15:unbound-anchor-1.6.8-1.34 SUSE Linux Enterprise Module for Basesystem 15:unbound-devel-1.6.8-1.34 SUSE Linux Enterprise Module for Basesystem 15 SP1:libunbound2-1.6.8-8.3 SUSE Linux Enterprise Module for Basesystem 15 SP1:unbound-anchor-1.6.8-8.3 SUSE Linux Enterprise Module for Basesystem 15 SP1:unbound-devel-1.6.8-8.3 SUSE Linux Enterprise Module for Basesystem 15 SP2:libunbound2-1.6.8-8.3 SUSE Linux Enterprise Module for Basesystem 15 SP2:unbound-anchor-1.6.8-8.3 SUSE Linux Enterprise Module for Basesystem 15 SP2:unbound-devel-1.6.8-8.3 SUSE Linux Enterprise Module for Basesystem 15 SP3:libunbound2-1.6.8-10.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:unbound-anchor-1.6.8-10.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:unbound-devel-1.6.8-10.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libunbound2-1.6.8-10.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:unbound-anchor-1.6.8-10.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:unbound-devel-1.6.8-10.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libunbound2-1.6.8-150100.10.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:unbound-anchor-1.6.8-150100.10.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:unbound-devel-1.6.8-150100.10.8.1 openSUSE Leap 15.0:libunbound2-1.6.8-lp150.1.4 openSUSE Leap 15.0:unbound-anchor-1.6.8-lp150.1.4 openSUSE Leap 15.2:libunbound2-1.6.8-lp152.8.9 openSUSE Leap 15.2:unbound-anchor-1.6.8-lp152.8.9 openSUSE Tumbleweed:libunbound8-1.13.2-1.2 openSUSE Tumbleweed:python3-unbound-1.13.2-1.2 openSUSE Tumbleweed:unbound-1.13.2-1.2 openSUSE Tumbleweed:unbound-anchor-1.13.2-1.2 openSUSE Tumbleweed:unbound-devel-1.13.2-1.2 openSUSE Tumbleweed:unbound-munin-1.13.2-1.2 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L