CVE-2020-12662
unbound: amplification of an incoming query into a large number of queries directed to a target
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 19, 2020
Updated · June 27, 2026
Description
A network amplification vulnerability was found in Unbound, in the way it processes delegation messages from one authoritative zone to another. This flaw allows an attacker to cause a denial of service or be part of an attack against another DNS server when Unbound is deployed as a recursive resolver or authoritative name server.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-941 · Incorrectly Specified Destination in a Communication Channel