Red Hat Security Advisory: unbound security update
Red Hat has issued a security advisory for the unbound DNS resolver packages addressing two vulnerabilities: CVE-2024-33655 (DNSBomb) and CVE-2025-11411 (domain hijacking via promiscuous records). These vulnerabilities affect Red Hat Enterprise Linux 9 versions from 9.0.0 up to and including 9.8 across multiple architectures. The update is rated as having a moderate security impact. Red Hat provides updated packages to fix these issues and recommends applying the update as detailed in their advisory.
AI Analysis
Technical Summary
The unbound packages in Red Hat Enterprise Linux 9 provide a validating, recursive, and caching DNS or DNSSEC resolver. Two security vulnerabilities have been identified and fixed: CVE-2024-33655, known as the DNSBomb vulnerability, and CVE-2025-11411, which involves domain hijacking via promiscuous records. These issues could potentially impact DNS resolution integrity and availability. Red Hat has released updated unbound packages to address these vulnerabilities in versions >=9.0.0 <=9.8. The advisory includes detailed information on the fixes and references to the CVE pages for further technical details.
Potential Impact
The vulnerabilities could allow an attacker to exploit the DNS resolver to cause denial of service (DNSBomb) or perform domain hijacking via promiscuous records, potentially affecting DNS resolution trustworthiness and availability. The security impact is rated as moderate by Red Hat Product Security. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated unbound packages that fix these vulnerabilities. Users of affected Red Hat Enterprise Linux 9 versions (>=9.0.0 <=9.8) should apply the security update as described in the Red Hat advisory RHSA-2026:18931 and the referenced article https://access.redhat.com/articles/11258. This update mitigates the DNSBomb and domain hijacking vulnerabilities. No additional mitigation steps are indicated beyond applying the official update.
Red Hat Security Advisory: unbound security update
Description
Red Hat has issued a security advisory for the unbound DNS resolver packages addressing two vulnerabilities: CVE-2024-33655 (DNSBomb) and CVE-2025-11411 (domain hijacking via promiscuous records). These vulnerabilities affect Red Hat Enterprise Linux 9 versions from 9.0.0 up to and including 9.8 across multiple architectures. The update is rated as having a moderate security impact. Red Hat provides updated packages to fix these issues and recommends applying the update as detailed in their advisory.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The unbound packages in Red Hat Enterprise Linux 9 provide a validating, recursive, and caching DNS or DNSSEC resolver. Two security vulnerabilities have been identified and fixed: CVE-2024-33655, known as the DNSBomb vulnerability, and CVE-2025-11411, which involves domain hijacking via promiscuous records. These issues could potentially impact DNS resolution integrity and availability. Red Hat has released updated unbound packages to address these vulnerabilities in versions >=9.0.0 <=9.8. The advisory includes detailed information on the fixes and references to the CVE pages for further technical details.
Potential Impact
The vulnerabilities could allow an attacker to exploit the DNS resolver to cause denial of service (DNSBomb) or perform domain hijacking via promiscuous records, potentially affecting DNS resolution trustworthiness and availability. The security impact is rated as moderate by Red Hat Product Security. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated unbound packages that fix these vulnerabilities. Users of affected Red Hat Enterprise Linux 9 versions (>=9.0.0 <=9.8) should apply the security update as described in the Red Hat advisory RHSA-2026:18931 and the referenced article https://access.redhat.com/articles/11258. This update mitigates the DNSBomb and domain hijacking vulnerabilities. No additional mitigation steps are indicated beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:18931
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-11411"]
Threat ID: 6a3da1c64853345fc1820489
Added to database: 06/25/2026, 21:46:46 UTC
Last enriched: 09/17/2026, 22:47:51 UTC
Last updated: 10/02/2026, 02:45:58 UTC
Views: 61
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.