CVE-2017-15105CWE-358

A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records

published January 23, 2018

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03162 · 87.9th percentile
Weakness
CWE-358 · Improperly Implemented Security Check for Standard
Published
2018-01-23T16:00Z
EPSS history
Timeline
  • 23 JAN 16:00Z
    A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records
    cvelistv5