Medium severity5.3NVD Advisory· Published Jan 23, 2018· Updated Jun 17, 2026

CVE-2017-15105

Description

A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Unbound/Unboundllm-fuzzy
Range: <1.6.8
osv-coords
pkg:rpm/opensuse/unbound&distro=openSUSE%20Tumbleweed
Range: < 1.13.2-1.2
Nlnetlabs/Unboundv5
Range: before 1.6.8

Patches

Vulnerability mechanics

References

unbound.net/downloads/CVE-2017-15105.txtnvdPatchVendor Advisory
www.securityfocus.com/bid/102817nvdThird Party AdvisoryVDB Entry
lists.debian.org/debian-lts-announce/2018/01/msg00039.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2019/02/msg00022.htmlnvdMailing ListThird Party Advisory
usn.ubuntu.com/3673-1/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000