# CVE-2024-33655: libunbound8: The DNS protocol in RFC 1035 and updates allows remote attackers to cause adenial of service (resource consumption) b... CVE-2024-33655 is fixed in 16 products on 1 platform, first by libunbound8 1.9.4-2ubuntu1.6, released May 9, 2024. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2024-33655 - Priority: High - CVSS: 7.5 (Low) - EPSS: 0.0174 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: May 9, 2024 ## Description The DNS protocol in RFC 1035 and updates allows remote attackers to cause adenial of service (resource consumption) by arranging for DNS queries to beaccumulated for seconds, such that responses are later sent in a pulsingburst (which can be considered traffic amplification in some cases), akathe "DNSBomb" issue. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libunbound8 Ubuntu 20.04 LTS (focal) | 1.9.4-2ubuntu1.6 | [libunbound8 1.9.4-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libunbound8-1.9.4-2ubuntu1.6.md) | May 9, 2024 | | Linux | libunbound8 Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.5 | [libunbound8 1.13.1-1ubuntu5.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libunbound8-1.13.1-1ubuntu5.5.md) | May 9, 2024 | | Linux | libunbound8 Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.1 | [libunbound8 1.19.2-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libunbound8-1.19.2-1ubuntu3.1.md) | May 9, 2024 | | Linux | libunbound8 Ubuntu 24.10 (oracular) | 1.20.0-1ubuntu1 | [libunbound8 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libunbound8-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | libunbound8 Ubuntu 25.04 (plucky) | 1.20.0-1ubuntu1 | [libunbound8 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libunbound8-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | python-unbound Ubuntu 20.04 LTS (focal) | 1.9.4-2ubuntu1.6 | [python-unbound 1.9.4-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python-unbound-1.9.4-2ubuntu1.6.md) | May 9, 2024 | | Linux | python3-unbound RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 | | Linux | python3-unbound Ubuntu 20.04 LTS (focal) | 1.9.4-2ubuntu1.6 | [python3-unbound 1.9.4-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-unbound-1.9.4-2ubuntu1.6.md) | May 9, 2024 | | Linux | python3-unbound Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.5 | [python3-unbound 1.13.1-1ubuntu5.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-unbound-1.13.1-1ubuntu5.5.md) | May 9, 2024 | | Linux | python3-unbound Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.1 | [python3-unbound 1.19.2-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3-unbound-1.19.2-1ubuntu3.1.md) | May 9, 2024 | | Linux | python3-unbound Ubuntu 24.10 (oracular) | 1.20.0-1ubuntu1 | [python3-unbound 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-python3-unbound-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | python3-unbound Ubuntu 25.04 (plucky) | 1.20.0-1ubuntu1 | [python3-unbound 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-python3-unbound-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | python3-unbound almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 | | Linux | python3-unbound almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 | | Linux | python3-unbound amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | python3-unbound ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 | | Linux | python3-unbound ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 | | Linux | python3-unbound-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound Debian 11.6 (bullseye) | 1.13.1-1+deb11u5 | [DLA-4280-1](https://patchblox.com/security/data/fix/linux/dla-4280-1.md) | Aug 24, 2025 | | Linux | unbound Debian 12.15 (bookworm) | 1.17.1-2+deb12u3 | [DSA-5987-1](https://patchblox.com/security/data/fix/linux/dsa-5987-1.md) | Aug 27, 2025 | | Linux | unbound Debian 13.5 (trixie) | 1.20.0-1 | [DEBIAN-CVE-2024-33655](https://patchblox.com/security/data/fix/linux/debian-cve-2024-33655.md) | Jun 6, 2024 | | Linux | unbound Debian 14 | 1.20.0-1 | [DEBIAN-CVE-2024-33655](https://patchblox.com/security/data/fix/linux/debian-cve-2024-33655.md) | Jun 6, 2024 | | Linux | unbound RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 | | Linux | unbound Ubuntu 20.04 LTS (focal) | 1.9.4-2ubuntu1.6 | [unbound 1.9.4-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-unbound-1.9.4-2ubuntu1.6.md) | May 9, 2024 | | Linux | unbound Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.5 | [unbound 1.13.1-1ubuntu5.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-unbound-1.13.1-1ubuntu5.5.md) | May 9, 2024 | | Linux | unbound Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.1 | [unbound 1.19.2-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-unbound-1.19.2-1ubuntu3.1.md) | May 9, 2024 | | Linux | unbound Ubuntu 24.10 (oracular) | 1.20.0-1ubuntu1 | [unbound 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-unbound-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | unbound Ubuntu 25.04 (plucky) | 1.20.0-1ubuntu1 | [unbound 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-unbound-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | unbound almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 | | Linux | unbound almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 | | Linux | unbound amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 | | Linux | unbound ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 | | Linux | unbound rocky 10 | 0:1.24.2-7.el10 | [RLSA-2026:18556](https://patchblox.com/security/data/fix/linux/rlsa-2026-18556.md) | May 29, 2026 | | Linux | unbound rocky 9 | 0:1.24.2-2.el9 | [RLSA-2026:18931](https://patchblox.com/security/data/fix/linux/rlsa-2026-18931.md) | May 28, 2026 | | Linux | unbound-anchor Ubuntu 20.04 LTS (focal) | 1.9.4-2ubuntu1.6 | [unbound-anchor 1.9.4-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-unbound-anchor-1.9.4-2ubuntu1.6.md) | May 9, 2024 | | Linux | unbound-anchor Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.5 | [unbound-anchor 1.13.1-1ubuntu5.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-unbound-anchor-1.13.1-1ubuntu5.5.md) | May 9, 2024 | | Linux | unbound-anchor Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.1 | [unbound-anchor 1.19.2-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-unbound-anchor-1.19.2-1ubuntu3.1.md) | May 9, 2024 | | Linux | unbound-anchor Ubuntu 24.10 (oracular) | 1.20.0-1ubuntu1 | [unbound-anchor 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-unbound-anchor-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | unbound-anchor Ubuntu 25.04 (plucky) | 1.20.0-1ubuntu1 | [unbound-anchor 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-unbound-anchor-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | unbound-anchor almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 | | Linux | unbound-anchor amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound-anchor ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 | | Linux | unbound-anchor-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound-debugsource amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound-devel RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 | | Linux | unbound-devel almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 | | Linux | unbound-devel almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 | | Linux | unbound-devel amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound-devel ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 | | Linux | unbound-devel ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 | | Linux | unbound-dracut RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 | | Linux | unbound-dracut almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 | | Linux | unbound-dracut almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 | | Linux | unbound-dracut ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 | | Linux | unbound-dracut ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 | | Linux | unbound-host Ubuntu 20.04 LTS (focal) | 1.9.4-2ubuntu1.6 | [unbound-host 1.9.4-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-unbound-host-1.9.4-2ubuntu1.6.md) | May 9, 2024 | | Linux | unbound-host Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.5 | [unbound-host 1.13.1-1ubuntu5.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-unbound-host-1.13.1-1ubuntu5.5.md) | May 9, 2024 | | Linux | unbound-host Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.1 | [unbound-host 1.19.2-1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-unbound-host-1.19.2-1ubuntu3.1.md) | May 9, 2024 | | Linux | unbound-host Ubuntu 24.10 (oracular) | 1.20.0-1ubuntu1 | [unbound-host 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-unbound-host-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | unbound-host Ubuntu 25.04 (plucky) | 1.20.0-1ubuntu1 | [unbound-host 1.20.0-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-unbound-host-1.20.0-1ubuntu1.md) | May 10, 2024 | | Linux | unbound-libs RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 | | Linux | unbound-libs almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 | | Linux | unbound-libs almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 | | Linux | unbound-libs amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound-libs ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 | | Linux | unbound-libs ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 | | Linux | unbound-libs-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound-utils almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 | | Linux | unbound-utils amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | | Linux | unbound-utils ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 | | Linux | unbound-utils-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.4 | [ALAS2023-2024-610](https://patchblox.com/security/data/fix/linux/alas2023-2024-610.md) | May 9, 2024 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.