High
Security advisory
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-12663
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:05 UTC · Revision 1
Source evidence
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
osv:CVE-2020-12663
Complete source record
{
"id": "9eedfaf9f5d58b8f4b3fe4ea4ec2c97cdd203194583b7afde560c3429535a65d",
"url": "https://osv.dev/vulnerability/CVE-2020-12663",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-12663",
"summary": "Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.",
"evidence": "osv:CVE-2020-12663",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2020-12663",
"aliases": [
"CVE-2020-12663"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/nlnetlabs/unbound",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.10.1"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"release-1.10.0",
"release-1.10.0rc2",
"release-1.10.0rc1",
"release-1.9.6",
"release-1.9.6rc1",
"release-1.9.3rc2",
"release-1.9.3",
"release-1.9.3rc1",
"release-1.9.2",
"release-1.9.2rc3",
"release-1.9.2rc1",
"release-1.9.2rc2",
"final-svn-state",
"release-1.9.1rc1",
"release-1.9.0rc1",
"release-1.8.2rc1",
"release-1.8.1rc1",
"release-1.8.0rc1",
"release-1.7.3rc1",
"release-1.7.2rc1",
"release-1.7.1rc1",
"release-1.7.0rc3",
"release-1.7.0rc2",
"release-1.7.0rc1",
"release-1.6.7",
"release-1.6.7rc1",
"release-1.6.6rc2",
"release-1.6.6rc1",
"release-1.6.4rc2",
"release-1.6.4rc1",
"release-1.6.2rc1",
"release-1.6.1rc3",
"release-1.6.1rc2",
"release-1.6.1rc1",
"release-1.6.0rc1",
"release-1.5.10rc1",
"release-1.5.10",
"release-1.5.9rc1",
"release-1.5.8rc1",
"release-1.5.8",
"release-1.5.7",
"release-1.5.6",
"release-1.5.6rc1",
"release-1.5.5",
"release-1.5.5rc1",
"release-1.5.4rc1",
"release-1.5.4",
"release-1.5.3rc1",
"release-1.5.2",
"release-1.5.2rc1",
"release-1.5.1",
"release-1.5.1rc2",
"release-1.5.1rc1",
"release-1.5.0rc1",
"release-1.4.22",
"release-1.4.22rc1",
"release-1.4.20",
"release-1.4.19",
"release-1.4.19rc1",
"release-1.4.18rc2",
"release-1.4.18rc1",
"release-1.4.17",
"release-1.4.17rc1",
"release-1.4.14",
"release-1.4.14rc1",
"release-1.4.13",
"release-1.4.13rc2",
"release-1.4.13rc1",
"release-1.4.12rc1",
"release-1.4.11rc3",
"release-1.4.11",
"release-1.4.11rc2",
"release-1.4.11rc1",
"release-1.4.9",
"release-1.4.9rc1",
"release-1.4.8rc1",
"release-1.4.7",
"release-1.4.7rc1",
"release-1.4.6",
"release-1.4.6rc1",
"release-1.4.5",
"release-1.4.5rc1",
"release-1.4.4",
"release-1.4.4rc1",
"release-1.4.3",
"release-1.4.2",
"release-1.4.1",
"release-1.4.0",
"release-1.4.0rc1",
"release-1.3.3",
"release-1.3.3rc1",
"release-1.3.2",
"release-1.3.1",
"release-1.1.1",
"release-1.0.1",
"release-0.11",
"release-0.10",
"release-0.8",
"release-0.7",
"release-0.6",
"release-0.5",
"release-0.4",
"release-0.3",
"release-0.1",
"release-0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-12663.json",
"vanir_signatures": [
{
"id": "CVE-2020-12663-006cb4c6",
"digest": {
"length": 865,
"function_hash": "113116855610194921862305706533955546246"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c",
"function": "delegpt_add_addr"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-017bb2c0",
"digest": {
"length": 11892,
"function_hash": "210298491321038615342952525563891799658"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "processQueryTargets"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-0a7c77d9",
"digest": {
"length": 486,
"function_hash": "278660584235601848036157191640454729714"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c",
"function": "delegpt_add_neg_msg"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-1269cacc",
"digest": {
"length": 146,
"function_hash": "262799613194837653087654552143129179442"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "target_count_increase"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-141216e5",
"digest": {
"length": 1313,
"function_hash": "283593751910739810346424521356211674954"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "services/cache/dns.c",
"function": "cache_fill_missing"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-1809a787",
"digest": {
"length": 673,
"function_hash": "51932557111404273923453324488684905431"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "util/data/dname.c",
"function": "dname_pkt_copy"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-228100ce",
"digest": {
"length": 1258,
"function_hash": "184128624603679833423350825670624210577"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "services/cache/dns.c",
"function": "find_add_addrs"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-249a7b26",
"digest": {
"length": 5009,
"function_hash": "71857393361318779489633568256129477924"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_scrub.c",
"function": "scrub_normalize"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-25da2229",
"digest": {
"threshold": 0.9,
"line_hashes": [
"123966532767303985025043565748428502831",
"55714213548790391849516691167344030302",
"149576322521807475307293933429486330225",
"216614008327521647680899727434074957608",
"287562965553422787498501290779672690958",
"283797638873969947297752398336775246700",
"36165385970475526530599163976350895105",
"337565090798204056972079384232233518032",
"340043185063016247422086785155277754707",
"338628700038289340275330716183609156219",
"77994682852737084972696213086108823603",
"132003260262131731170729194480738183145",
"170926288522529895197067091670177043477",
"166399755032023911203349898818378423979",
"24829791444624118552520828497228520097",
"288484836270530366244587558608911276351",
"152244581758329359987910627055208915426",
"100617646865113089782695054258308077357",
"245576346699625435281181370962360378312",
"255335507931538937086622920311836539558",
"42449887695204957381510359456928479816",
"238288288973137994356721049791280919029"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-27535255",
"digest": {
"threshold": 0.9,
"line_hashes": [
"86236281555866475309555918201873785012",
"104477412356900468255025334495838270228",
"249931558349264348680722231791522115445",
"260616886490379968216839365631374953198",
"315605260075292036019686297104552094444",
"83925774816485453405246819212035008112",
"288245355290614980376423217229303016882"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-2aa76637",
"digest": {
"length": 1063,
"function_hash": "184518730500286951430699552235988061543"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "generate_parentside_target_query"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-2b69ea0f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"255702487717783866031239060508570318805",
"250309427433822881087810601418114094518",
"329866565713723080148265014169400183796",
"191177318927676394491911564191322451786",
"253154138948864435747984607555312543707",
"170628119968819874554191431981736881419",
"116424486702401915496729785738221280274",
"294778678032367055611140652485276566467",
"272139040054679169245894234796402459006",
"264331464366729224313908296864372066699",
"329229580205391268933377281317031497793",
"192455189770337175171784516078977483491",
"32102201393043038067749426174308583596",
"208264598131606111904122967389997756338",
"298990385847511931891862850484226408750",
"301774910047225348631200957622218674917"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "services/cache/dns.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-2c727b61",
"digest": {
"threshold": 0.9,
"line_hashes": [
"107124486363778227497480333475905181275",
"281338488598366055911167221123702961594",
"25707438796141987702162388522653581629",
"94838757003433768930720318691915968445",
"128463243412736837410237849738331972662",
"318963578127637825508194322588462725429",
"167036985835021145254486033165480736231",
"39982230416326723077078112323697022636",
"154620215118646733349822566654993973739",
"338263998055140669889706585448186267120",
"105583829776222516720696221656549874257",
"143284278791732228126159563151019769782",
"46668059802037953162765504833027721986",
"286137390619972850001648935325731166166",
"200468839862264628023607178423752498679",
"290715296183685158406507780077649908153",
"62944556647803331927905107655874415724",
"202441919075321430206701153369552520312",
"145917741312526783494910038715263796187",
"291324495212204635076758811255950510392",
"277661855039920955265981102885097852927",
"244605913756054772364760682967473242309",
"98791906151739627788894294540373405870",
"300001356518379833149362398067661130950",
"73311621335295826717213526021425547309",
"155087708539270821952697267473043485566",
"205822749016110331815224218484239492868",
"254208102224908373527937240614407994299",
"243269782492450993272248987404385071428",
"72162274474016175244443919391294292546",
"98791906151739627788894294540373405870",
"300001356518379833149362398067661130950"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "util/data/dname.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-31f38889",
"digest": {
"length": 924,
"function_hash": "145705277398234176112970350733460166292"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c",
"function": "delegpt_copy"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-3514367c",
"digest": {
"length": 513,
"function_hash": "76308643255493095209225441952048119266"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c",
"function": "delegpt_add_rrset"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-3e648334",
"digest": {
"length": 835,
"function_hash": "328367100558908780304682545667114141714"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "generate_dnskey_prefetch"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-3f2e450a",
"digest": {
"length": 720,
"function_hash": "274413001880997721042809828705405376099"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c",
"function": "delegpt_add_rrset_AAAA"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-420df89c",
"digest": {
"length": 795,
"function_hash": "308319438473669813887317205940415132221"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "error_supers"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-4e33654c",
"digest": {
"length": 1036,
"function_hash": "126522199378469205287181693417101035500"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "processCollectClass"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-51a4ded0",
"digest": {
"length": 1015,
"function_hash": "311654721217104281428940356237727167615"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_utils.c",
"function": "iter_lookup_parent_glue_from_cache"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-5263e8ea",
"digest": {
"threshold": 0.9,
"line_hashes": [
"167216056979393857530880447602834908503",
"144306405568174553989403555047762947389",
"203306176210748425014624519237123421927",
"156381855237864129212695645389270228977",
"199943296245397309685224582530973685493",
"273072519120069351462271025865844192533",
"328891255403226133669210985784268992042",
"337109691121339642059955047428414510190",
"98400690734938568676933565707341187833",
"660127724783667666675686709875598908",
"245150974858877620706309249786799211787",
"142569245065005140946779236273104032229",
"120731921219734551263446862844364287482",
"73785512570350433707761834363525723245",
"279535868492075306294586069404819963452",
"188118777508858405376987052454200464147",
"7149174168469777662851133566214313319",
"322670953790709199973225932481940509087",
"109457070678740376366766583688166469720",
"8986236959527261596669115794538002340",
"57466914894960999883745191488721844934",
"261427574197242349924167565521345194804",
"57405798898756076812760897709567409201",
"28044256384531445457189151919080873979",
"292926637931099423403892843387869180127"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_scrub.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-58b94eb4",
"digest": {
"length": 1906,
"function_hash": "245910032984276301387183297741008552206"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "prime_stub"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-5c50c375",
"digest": {
"length": 534,
"function_hash": "136681649457132593380213430140243312318"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_scrub.c",
"function": "synth_cname"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-60d969af",
"digest": {
"threshold": 0.9,
"line_hashes": [
"263681675707098751414585781114915764062",
"99085858150766971259167424474354771814",
"190422538161226213928966736292516202708",
"208688632438365137713256187295531356034"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "util/data/msgparse.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-66b5c005",
"digest": {
"length": 595,
"function_hash": "224480752871634229757079080694760564080"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "util/data/dname.c",
"function": "dname_print"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-6944ea7a",
"digest": {
"length": 213,
"function_hash": "312742064285274144510452440700667855138"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "target_count_create"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-6b3b8789",
"digest": {
"length": 1043,
"function_hash": "115075322308864629749743327590125993946"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c",
"function": "delegpt_from_message"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-6e0465c1",
"digest": {
"length": 910,
"function_hash": "310214206650535776919939033526629672444"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "util/data/dname.c",
"function": "dname_pkt_compare"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-72c4a35c",
"digest": {
"length": 696,
"function_hash": "36253808551822149294725855630761475806"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_scrub.c",
"function": "parse_get_cname_target"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-730895e1",
"digest": {
"length": 535,
"function_hash": "165702312892790524132813997610192010304"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "util/data/dname.c",
"function": "dname_pkt_hash"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-7c98211a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"88089643127607578596132520627033626208",
"268792464951244757229944026602490073568",
"312546306349176958274678547686774031924",
"5734010347967264333265026188355013397",
"81875746411809344801808477909545813693",
"172109265015006408322661923053223580409",
"199734737156328329832982434697411357429",
"246527892307820079237773890785887706138",
"64504150687986363905229905216318058935",
"304173259916542914042032578766747154598",
"59425845784988165302271870624817715244",
"64565044910658251583396357334844753312",
"163910714131450841544171018778554578919",
"327343874844916996320227257462879196780",
"202504742638931253870266640023914754803",
"259940236368136151288444205189242725310",
"44270066143322114534564733292481222878",
"314142712447220054982366396835317047633",
"257284501054396044068275783366091980435",
"163647002566669754897948334269101354743",
"34189831824784583489339824928023055896",
"130336756765522648875539172984545750927",
"207040777889366896365780552730536728002",
"261431172569517521051394352975992700893",
"213248633707770753516124521642952936988",
"102359774827663064683018464539320297983",
"3209473514605846282910835241615370169",
"38476849432289686623330331810000746237",
"171151015057820177095425385141226506651",
"78740153358292375221298760345934622180",
"14232438728725818366067312270596553697",
"291947679110909389102967665041140474920",
"71150874740263675768053182975619264929",
"201618041854371384703028770405639898444",
"95238015870621496274859020330453450560",
"39737348985038089588903370293935904331",
"117378737399114158510035937597522252249",
"261486249311035792409457097820222808065",
"48964216852940056097978557102765083668",
"291947679110909389102967665041140474920",
"303128176834020355946416626183933520437",
"201618041854371384703028770405639898444",
"95238015870621496274859020330453450560",
"39737348985038089588903370293935904331",
"154978500497868565536125365251857916750",
"201020216499140737285708465640768932274",
"300618326616405236140728728973682600611",
"256320139228091205961592285393434165303",
"214654497967607809616137768263131727946",
"188753125298277829539231127665372004041",
"305074409371634273125333131209333128691",
"36981672376272583090053443473362266212",
"312471530565638603060313564878169347429",
"260755329150155545838169985502569519377",
"185756010885829612556304260475068336283",
"141568875709574893547338904579714866165",
"76297975940384524607467331665794100358",
"106816646750198429329068942635987959664",
"300687734321110671852484573966088301513",
"215893777589384756800650456473391376167",
"257673180784192336508074013056860420203",
"124095213369713793813964330666966098241",
"195567546819158781378574536059329345648",
"267169733330505320366033564928356154347",
"255942630797353331782957624176564351612",
"22921416599344323688739802416794168095",
"185972986744934316064218115102323724503",
"150299781826140998053968775699834660742",
"159115174012733003584951680962174950349",
"263753122619551576173613706935224890541",
"48098656433548549355499949334875837788"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-7d138bc8",
"digest": {
"length": 1205,
"function_hash": "299416844386134601067192029755549904454"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "processPrimeResponse"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-8b58b062",
"digest": {
"length": 1570,
"function_hash": "251440365661552642729257953148496030762"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "processTargetResponse"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-8e2c4e3d",
"digest": {
"length": 1713,
"function_hash": "205558513961422518171584160678029178918"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "query_for_targets"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-909d103c",
"digest": {
"length": 9301,
"function_hash": "170650452694507284246871467511303619933"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "processInitRequest"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-90a1dd67",
"digest": {
"length": 1263,
"function_hash": "297439657251649932085506077168222295938"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "generate_a_aaaa_check"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-9be7ed5c",
"digest": {
"length": 1784,
"function_hash": "19740916413570404634082594959788170293"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "generate_sub_request"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-a310c0ec",
"digest": {
"length": 482,
"function_hash": "38312280821516324273149430500561799952"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c",
"function": "delegpt_add_target"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-a546b77b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"82626161165851774671188688305998768027",
"245307280185032983261006286993232242059",
"146624813616040229519563106456076483240",
"181862872959559529893663296986963365070",
"189548193665943155308805495657627383748",
"241165759173457585288862027342272579500",
"161935822105118119686829427802730000781",
"49309216418043952376366871299464634942",
"120364912574741135735679102317020478344",
"120089064374723272558502356257277166804",
"76446510496034668319802850020259486603",
"42435988178158243652769156494724895557",
"39358218395308284851575958099851902047",
"148321155276752365676985857452690350647",
"188959898771107647049873040077473304555",
"325777201056953292487564833446698297985",
"187147297781149935114288396061247882511",
"318352701021288324594135152180406670904",
"332992785588043369397466240745488308950",
"27098436225210018394536512707828064312",
"1274183700320225948500476928309224870",
"57284642738328777377869224508689812566",
"142479891617887903175881883098655231835",
"205106607981130232620469236440859179081",
"85794067697132119865883755453948880806",
"225194305593008583996221514948965822411",
"93475079499028434686938484867294019494",
"213172634877908026230864061202352569826",
"164874673311581585910156461487016682676",
"97053188896337620399985753774170176987",
"224774764574048114802025579807371563204",
"189816764117822432098718338256567083978",
"278646866813345230061900378402830439190",
"223199255090179636936570181888572199158",
"235136815840012182448465601467919171287",
"186772680897414570652313590046010599357",
"154507348920223419038203758561594416762",
"242222620148107384516143130077409217251",
"168720888991173430132495011187885384577",
"258410219608545353447667128768373689861",
"195408240963104158383329043839682854165",
"33098610351528476709744630657964874088",
"246149829056965534750083405110387706519",
"158380258962749707564895918876147405563",
"300638640915333909434316111308273366344",
"316791075452803553804569519886579563993",
"125960245107965776412831042909567262607",
"306255023311308374858675242404890875167",
"76212503953885663210532810971505503947",
"72469229716177365908249015259722489065",
"261730487625697196629237537337512685795",
"239821046614347699293018165441212332169",
"102786698038322370352358450299157122949",
"25929968030514591135300956612186812461",
"37505357811952393596130779874800355357",
"131653907345349658036974257018738875558",
"167738544463320086662738261882236388146",
"278097435295117676891752450050610952392",
"222547714785502583541446586637678954697",
"165968373873942151246323721547537741984",
"251005020370784214216704449730603775328",
"249173281820672272647847410052244087357",
"235876322701396827570637100178575708229",
"25343857245430983104442514486408340568",
"251563054404819193516332061702230827279",
"87834100768903519282048589106355895456",
"208795989765843191978608848117296895287",
"216715943343815071276704838790428333565",
"209448506995981884763699886968224391984",
"87834100768903519282048589106355895456",
"208795989765843191978608848117296895287",
"123536092534345722216432932404287016374",
"32543360519694470175534011694484689583",
"28420427459150306541259816579859898231",
"287735598285674403658011738567094035219",
"115301158369711195420346875562731156049",
"169733155125137372323232439538733541199",
"92533482732588743714434589277471624958",
"185250537030161865254348305159063646692",
"237259307643556383771134168641081774116",
"134487274115000998297541504861254538346",
"41198199333548102286978745291256346360",
"184382897149671899952288105064316543035",
"224317374104857188399451541086093360618",
"132290643066770296425049167408452837243",
"99881789316890273047685690576818385369",
"16064942978761304914379141355824196826",
"332278914911235376976733327863362161835",
"178773778456344881661834977693834829684",
"276818803724266547772494068853626279480",
"272215992102763411204008626622919591884",
"306996594539712622351047262147651300579",
"340239983537397297692275642349806217523",
"269213050362259828832622135632896196721",
"39736502754835205646809970973815610318",
"124088819204083299074039665331433602495",
"300123780555139959003990237444807550779",
"91899904807653676273236444271395356545",
"206128880739330593956931554904219662183",
"324444177898847914149509581146607819113",
"337204307384273349164665549288033567782",
"236365345015127440538185237867998636788",
"217452324485032673977087000244489881806",
"284186283412959978403569056196953219505",
"32226121126089417044321696989572436799",
"197976713341146808135651539401950017992",
"135891823425449965129311075893145327847",
"240976677261807694219450844565679432497",
"32226121126089417044321696989572436799",
"197976713341146808135651539401950017992",
"135891823425449965129311075893145327847",
"240976677261807694219450844565679432497",
"23308442112889528637619517200989993549",
"230064182379210053449585373472610754086",
"6346262085502038786558201730515361080",
"135846568151472481955959433651340272074",
"152418481056524799713282313218494286535",
"304189906070059673984221579883327091650",
"311902124385833775331200528195885408598",
"320048223528488401119656780842544329859",
"257475776715481418655996967070707797281",
"136493769816913026596442054582543505812",
"299090586462480844639249539080946901920",
"60030450940556569901696005537753506979",
"69991169317554200112499819445562539313",
"246632292413477511605232231727888610798",
"242526520401096783958233014424597463379",
"199329858083516293406078445399542296473",
"232553724561649308869980755541568869097",
"159219040331482446551286609674884358402",
"222584694873397447784164314318309031148",
"281922826336004436101684876883899126464",
"28400050931179908366035374372950477053",
"96169676491106591022310619022984272530",
"97112185954742104647359712678578054398",
"199492877441387810226437833724076351465",
"189969972379557536122925464023118522052",
"105361781637107791453578649428928179270",
"255106432272308443081795786754525660782",
"133541371330588099207282197773874052271",
"310566070466620452973531210078658433236",
"214201818163119817497309386822179783986",
"117749851450744862360941289175930821703",
"103240692350045471057765067541962681435",
"278041239837122665359749804011042230876",
"205974169292836912981973450728371332091",
"61001461102249555171665958399874750981",
"179436486276757093324071004381236389467",
"15125249939994861527185505125606944708",
"97130506481370922967094489754787713702",
"114555203859452689887967247613149761428",
"150617412262097091901582573738938698277",
"178038362465882588498223239156578756769",
"6582113100774824228138159053952622628",
"194219846824379232224011864169381254650",
"58910723773556803134642418114946065289",
"42792189059222318983035253471558772674",
"21920897641524758281581744753454054943",
"173283392516717476285104404272211142593",
"289947613938697333519009370577900242820",
"199584472318063987485239304684483826552",
"157916329931912124164446552051765459804",
"122236529910220059144073877769509990931",
"13053030180714606833816986257379915867",
"299735669846886529874539737797806240861",
"44314685065611810945126148289491882272",
"224888692600448594283568665227134772617"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-a7c64e4b",
"digest": {
"length": 1119,
"function_hash": "136108075078221650866599364737551640354"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "prime_root"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-b5b4b3af",
"digest": {
"length": 5538,
"function_hash": "129137622226684148914872796541394377919"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "processLastResort"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-c76b99fc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204084704853056359728345407852353485372",
"205052553758171659077325591815005760033",
"317153014845397787910079756122672091935",
"90815376764941151153149724664678742043",
"227648888376889155332160682931492564489",
"131554089685238192069058313992176228753",
"151790418281130660325286800790054279710",
"274427782058996069692716930038343363227"
]
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_utils.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-ce1ff28d",
"digest": {
"length": 13117,
"function_hash": "313884093194065860359484805252414563177"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "processQueryResponse"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-ce4122e3",
"digest": {
"length": 714,
"function_hash": "194988791010580086746814433333850819457"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iter_delegpt.c",
"function": "delegpt_add_rrset_A"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-d033ad30",
"digest": {
"length": 1364,
"function_hash": "275812385650082507739228537469874554005"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "generate_ns_check"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-d3284d56",
"digest": {
"length": 358,
"function_hash": "230598077501171151430574109577770531890"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "generate_target_query"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-d81c4e42",
"digest": {
"length": 389,
"function_hash": "16125800059656821298982580358133072714"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "util/data/msgparse.c",
"function": "smart_compare"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-d877c407",
"digest": {
"length": 1190,
"function_hash": "42248642376991635186402304300313455039"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "iter_new"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-12663-fe6be43b",
"digest": {
"length": 1244,
"function_hash": "80203335593981824567177611524236488176"
},
"source": "https://github.com/nlnetlabs/unbound/commit/50d4c893c4e9c2e7ebedb39a6c0fd23a2f55d00a",
"target": {
"file": "iterator/iterator.c",
"function": "processDSNSFind"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:06:19Z"
}
}
],
"modified": "2026-10-24T14:06:19.808003540Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F5NFROI2OMCZLYRTCNGHGO3TUD32LCIQ/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJ42N2HBZ3DXMSEC56SWIIOFQGOS5M7I/",
"https://lists.debian.org/debian-lts-announce/2021/02/msg00017.html",
"https://nlnetlabs.nl/downloads/unbound/CVE-2020-12662_2020-12663.txt",
"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:19.unbound.asc",
"https://usn.ubuntu.com/4374-1/",
"https://www.debian.org/security/2020/dsa-4694"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "19.10"
},
{
"last_affected": "19.10"
},
{
"introduced": "20.04"
},
{
"last_affected": "20.04"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
},
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "31"
},
{
"last_affected": "31"
},
{
"introduced": "32"
},
{
"last_affected": "32"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.1"
},
{
"last_affected": "15.1"
},
{
"introduced": "15.2"
},
{
"last_affected": "15.2"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-12663",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443028,
"published_at": "2020-05-19T14:15:11.253+00:00"
}