Insufficient verification of data authenticity in Unbound - CVE-2025-11411

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU117534

Insufficient verification of data authenticity in Unbound - CVE-2025-11411

Published: October 22, 2025 / Updated: December 3, 2025


Vulnerability identifier: #VU117534
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-11411
CWE-ID: CWE-345
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to poison DNS cache. 

The vulnerability exists due to incorrect processing of DNS responses contain NS RRSets records. A remote attacker can poison DNS cache of the affected server.

Affected software

Unbound
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro
SUSE Linux Micro
OpenBSD
FreeBSD
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
openEuler
Ubuntu
Anolis OS
Fedora
Oracle Solaris
LANTIME Operating System Firmware (LTOS)
unbound-libs
unbound
python3-unbound
unbound-debuginfo
unbound-debugsource
unbound-devel
unbound-help
unbound (Ubuntu package)
unbound-anchor
unbound-utils
libunbound8-debuginfo
libunbound8
libunbound-devel-mini
libunbound-devel-mini-debuginfo
unbound-python
unbound-munin
libunbound-devel-mini-debugsource
unbound-python-debuginfo
unbound-anchor-debuginfo
unbound (Debian package)
python3-unbound-debuginfo

How to mitigate CVE-2025-11411

Install updates from vendor's website.

Unbound - update to 1.24.1
LANTIME Operating System Firmware (LTOS) - update to 7.10.005
unbound-libs - addressed in versions 1.11.0-22, 1.13.2-22, 1.17.1-14, 1.17.1-16
unbound - addressed in versions 1.11.0-22, 1.13.2-22, 1.17.1-14, 1.17.1-16
python3-unbound - addressed in versions 1.11.0-22, 1.13.2-22, 1.17.1-14, 1.17.1-16
unbound-debuginfo - addressed in versions 1.11.0-22, 1.13.2-22, 1.17.1-14, 1.17.1-16
unbound-debugsource - addressed in versions 1.11.0-22, 1.13.2-22, 1.17.1-14, 1.17.1-16
unbound-devel - addressed in versions 1.11.0-22, 1.13.2-22, 1.17.1-14, 1.17.1-16
unbound-help - addressed in versions 1.11.0-22, 1.13.2-22, 1.17.1-14, 1.17.1-16
unbound (Ubuntu package) - addressed in versions 1.13.1-1ubuntu5.13, 1.13.1-1ubuntu5.14, 1.19.2-1ubuntu3.6, 1.19.2-1ubuntu3.7, 1.22.0-1ubuntu1.2, 1.22.0-1ubuntu1.3, 1.22.0-2ubuntu2.1, 1.22.0-2ubuntu2.2
unbound-anchor - addressed in versions 1.13.2-22, 1.17.1-14, 1.17.1-16
python3-unbound - addressed in versions 1.17.1-9, 1.17.1-11
unbound - addressed in versions 1.17.1-9, 1.17.1-11
unbound-anchor - addressed in versions 1.17.1-9, 1.17.1-11
unbound-devel - addressed in versions 1.17.1-9, 1.17.1-11
unbound-libs - addressed in versions 1.17.1-9, 1.17.1-11
unbound-utils - addressed in versions 1.17.1-9, 1.17.1-11
unbound-utils - addressed in versions 1.17.1-14, 1.17.1-16
libunbound8-debuginfo - addressed in versions 1.20.0-150100.10.22.1, 1.20.0-150600.23.13.1, 1.22.0-slfo.1.1_3.1, 1.24.1-160000.1.1
unbound-debugsource - addressed in versions 1.20.0-150100.10.22.1, 1.20.0-150600.23.13.1, 1.22.0-slfo.1.1_3.1, 1.24.1-160000.1.1
unbound-debuginfo - addressed in versions 1.20.0-150100.10.22.1, 1.20.0-150600.23.13.1, 1.24.1-160000.1.1
libunbound8 - addressed in versions 1.20.0-150100.10.22.1, 1.20.0-150600.23.13.1, 1.22.0-slfo.1.1_3.1, 1.24.1-160000.1.1
unbound-anchor - addressed in versions 1.20.0-150100.10.22.1, 1.20.0-150600.23.13.1, 1.22.0-slfo.1.1_3.1, 1.24.1-160000.1.1
libunbound-devel-mini - update to 1.20.0-150600.23.13.1
libunbound-devel-mini-debuginfo - update to 1.20.0-150600.23.13.1
unbound-python - update to 1.20.0-150600.23.13.1
unbound-devel - addressed in versions 1.20.0-150600.23.13.1, 1.24.1-160000.1.1
unbound-munin - update to 1.20.0-150600.23.13.1
unbound - addressed in versions 1.20.0-150600.23.13.1, 1.24.1-160000.1.1
libunbound-devel-mini-debugsource - update to 1.20.0-150600.23.13.1
unbound-python-debuginfo - update to 1.20.0-150600.23.13.1
unbound-anchor-debuginfo - addressed in versions 1.20.0-150600.23.13.1, 1.22.0-slfo.1.1_3.1, 1.24.1-160000.1.1
unbound (Debian package) - update to 1.22.0-2+deb13u1
unbound - addressed in versions 1.24.1-1.fc41, 1.24.1-1.fc42, 1.24.1-1.fc43
python3-unbound-debuginfo - update to 1.24.1-160000.1.1
python3-unbound - update to 1.24.1-160000.1.1
Oracle Solaris - addressed in versions 11.3 ESU 36.35, 11.4 SRU 89

External References

Related Security Bulletins