CNNVD-202507-2097 Information

CNNVD ID

CNNVD-202507-2097

CVE-2025-5994

  • CNNVD Published: 2025-07-16

Description (Chinese)

NLnet Unbound是荷兰NLnet团队的一款开源DNS服务器。 NLnet Unbound存在安全漏洞,该漏洞源于支持EDNS Client Subnet时存在缓存投毒风险,可能导致Rebirthday攻击。

Description (English)

NLnet Unborn is an open source DNS server for the NLnet team in the Netherlands. There is a security loophole in NLnet Unbond, which stems from the risk of a cache of poisoning in support of the EDNS Clinic Subnet, which could lead to a Rebirthday attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

NLTK

Published

2025-07-16

Last Modified

2026-02-24

References

https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt https://access.redhat.com/security/cve/cve-2025-5994

Patch

https://nlnetlabs.nl/projects/unbound/download/

Share on: