# CVE-2025-11411: Possible domain hijacking via promiscuous records in the authority section

CVE-2025-11411 is fixed in 15 products on 1 platform, first by libunbound8 1.13.1-1ubuntu5.14, released October 22, 2025. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2025-11411
- Priority: Routine
- CVSS: 6.1 (Moderate)
- EPSS: 0.0033
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 22, 2025
- Weakness: Acceptance of Extraneous Untrusted Data With Trusted Data
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11411

## Description

unbound - security update

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libunbound8 Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.14 | [libunbound8 1.13.1-1ubuntu5.14](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libunbound8-1.13.1-1ubuntu5.14.md) | Oct 22, 2025 |
| Linux | libunbound8 Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.7 | [libunbound8 1.19.2-1ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libunbound8-1.19.2-1ubuntu3.7.md) | Oct 22, 2025 |
| Linux | libunbound8 Ubuntu 25.04 (plucky) | 1.22.0-1ubuntu1.2 | [libunbound8 1.22.0-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libunbound8-1.22.0-1ubuntu1.2.md) | Jan 16, 2026 |
| Linux | libunbound8 Ubuntu 25.10 (questing) | 1.22.0-2ubuntu2.2 | [libunbound8 1.22.0-2ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libunbound8-1.22.0-2ubuntu2.2.md) | Oct 22, 2025 |
| Linux | libunbound8 Ubuntu 26.04.1 LTS (resolute) | 1.24.2-1ubuntu1 | [libunbound8 1.24.2-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libunbound8-1.24.2-1ubuntu1.md) | Oct 22, 2025 |
| Linux | python3-unbound RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 |
| Linux | python3-unbound Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.14 | [python3-unbound 1.13.1-1ubuntu5.14](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-unbound-1.13.1-1ubuntu5.14.md) | Oct 22, 2025 |
| Linux | python3-unbound Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.7 | [python3-unbound 1.19.2-1ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3-unbound-1.19.2-1ubuntu3.7.md) | Oct 22, 2025 |
| Linux | python3-unbound Ubuntu 25.04 (plucky) | 1.22.0-1ubuntu1.2 | [python3-unbound 1.22.0-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-python3-unbound-1.22.0-1ubuntu1.2.md) | Jan 16, 2026 |
| Linux | python3-unbound Ubuntu 25.10 (questing) | 1.22.0-2ubuntu2.2 | [python3-unbound 1.22.0-2ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-python3-unbound-1.22.0-2ubuntu2.2.md) | Oct 22, 2025 |
| Linux | python3-unbound Ubuntu 26.04.1 LTS (resolute) | 1.24.2-1ubuntu1 | [python3-unbound 1.24.2-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3-unbound-1.24.2-1ubuntu1.md) | Oct 22, 2025 |
| Linux | python3-unbound almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 |
| Linux | python3-unbound almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 |
| Linux | python3-unbound amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | python3-unbound ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 |
| Linux | python3-unbound ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 |
| Linux | python3-unbound-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound Debian 11.6 (bullseye) | 1.13.1-1+deb11u7 | [DLA-4365-2](https://patchblox.com/security/data/fix/linux/dla-4365-2.md) | Nov 30, 2025 |
| Linux | unbound Debian 12.15 (bookworm) | 1.17.1-2+deb12u4 | [DEBIAN-CVE-2025-11411](https://patchblox.com/security/data/fix/linux/debian-cve-2025-11411.md) | Oct 22, 2025 |
| Linux | unbound Debian 13.5 (trixie) | 1.22.0-2+deb13u1 | [DSA-6071-1](https://patchblox.com/security/data/fix/linux/dsa-6071-1.md) | Dec 4, 2025 |
| Linux | unbound Debian 14 | 1.24.2-1 | [DEBIAN-CVE-2025-11411](https://patchblox.com/security/data/fix/linux/debian-cve-2025-11411.md) | Oct 22, 2025 |
| Linux | unbound RHEL 10 | 1.24.2-7.el10 | [RHSA-2026:18556](https://patchblox.com/security/data/fix/linux/rhsa-2026-18556.md) | Oct 22, 2025 |
| Linux | unbound RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 |
| Linux | unbound Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.14 | [unbound 1.13.1-1ubuntu5.14](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-unbound-1.13.1-1ubuntu5.14.md) | Oct 22, 2025 |
| Linux | unbound Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.7 | [unbound 1.19.2-1ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-unbound-1.19.2-1ubuntu3.7.md) | Oct 22, 2025 |
| Linux | unbound Ubuntu 25.04 (plucky) | 1.22.0-1ubuntu1.2 | [unbound 1.22.0-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-unbound-1.22.0-1ubuntu1.2.md) | Jan 16, 2026 |
| Linux | unbound Ubuntu 25.10 (questing) | 1.22.0-2ubuntu2.2 | [unbound 1.22.0-2ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-unbound-1.22.0-2ubuntu2.2.md) | Oct 22, 2025 |
| Linux | unbound Ubuntu 26.04.1 LTS (resolute) | 1.24.2-1ubuntu1 | [unbound 1.24.2-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-unbound-1.24.2-1ubuntu1.md) | Oct 22, 2025 |
| Linux | unbound almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 |
| Linux | unbound almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 |
| Linux | unbound amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 |
| Linux | unbound ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 |
| Linux | unbound opensuse-leap 15.6 | 1.20.0-150600.23.13.1 | [SUSE-SU-2025:4134-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4134-1.md) | Nov 18, 2025 |
| Linux | unbound opensuse-leap 16.0 | 1.24.1-160000.1.1 | [OPENSUSE-SU-2026:20139-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20139-1.md) | Jan 30, 2026 |
| Linux | unbound rocky 10 | 0:1.24.2-7.el10 | [RLSA-2026:18556](https://patchblox.com/security/data/fix/linux/rlsa-2026-18556.md) | May 29, 2026 |
| Linux | unbound rocky 9 | 0:1.24.2-2.el9 | [RLSA-2026:18931](https://patchblox.com/security/data/fix/linux/rlsa-2026-18931.md) | May 28, 2026 |
| Linux | unbound sles 15.6 | 1.20.0-150600.23.13.1 | [SUSE-SU-2025:4134-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4134-1.md) | Nov 18, 2025 |
| Linux | unbound sles 15.7 | 1.20.0-150600.23.13.1 | [SUSE-SU-2025:4134-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4134-1.md) | Nov 18, 2025 |
| Linux | unbound sles 16.0 | 1.24.1-160000.1.1 | [SUSE-SU-2026:20201-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20201-1.md) | Jan 30, 2026 |
| Linux | unbound-anchor Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.14 | [unbound-anchor 1.13.1-1ubuntu5.14](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-unbound-anchor-1.13.1-1ubuntu5.14.md) | Oct 22, 2025 |
| Linux | unbound-anchor Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.7 | [unbound-anchor 1.19.2-1ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-unbound-anchor-1.19.2-1ubuntu3.7.md) | Oct 22, 2025 |
| Linux | unbound-anchor Ubuntu 25.04 (plucky) | 1.22.0-1ubuntu1.2 | [unbound-anchor 1.22.0-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-unbound-anchor-1.22.0-1ubuntu1.2.md) | Jan 16, 2026 |
| Linux | unbound-anchor Ubuntu 25.10 (questing) | 1.22.0-2ubuntu2.2 | [unbound-anchor 1.22.0-2ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-unbound-anchor-1.22.0-2ubuntu2.2.md) | Oct 22, 2025 |
| Linux | unbound-anchor Ubuntu 26.04.1 LTS (resolute) | 1.24.2-1ubuntu1 | [unbound-anchor 1.24.2-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-unbound-anchor-1.24.2-1ubuntu1.md) | Oct 22, 2025 |
| Linux | unbound-anchor almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 |
| Linux | unbound-anchor amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound-anchor ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 |
| Linux | unbound-anchor-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound-debugsource amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound-devel RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 |
| Linux | unbound-devel almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 |
| Linux | unbound-devel almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 |
| Linux | unbound-devel amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound-devel ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 |
| Linux | unbound-devel ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 |
| Linux | unbound-dracut RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 |
| Linux | unbound-dracut almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 |
| Linux | unbound-dracut almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 |
| Linux | unbound-dracut ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 |
| Linux | unbound-dracut ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 |
| Linux | unbound-host Ubuntu 22.04.1 LTS (jammy) | 1.13.1-1ubuntu5.14 | [unbound-host 1.13.1-1ubuntu5.14](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-unbound-host-1.13.1-1ubuntu5.14.md) | Oct 22, 2025 |
| Linux | unbound-host Ubuntu 24.04.5 LTS (noble) | 1.19.2-1ubuntu3.7 | [unbound-host 1.19.2-1ubuntu3.7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-unbound-host-1.19.2-1ubuntu3.7.md) | Oct 22, 2025 |
| Linux | unbound-host Ubuntu 25.04 (plucky) | 1.22.0-1ubuntu1.2 | [unbound-host 1.22.0-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-unbound-host-1.22.0-1ubuntu1.2.md) | Jan 16, 2026 |
| Linux | unbound-host Ubuntu 25.10 (questing) | 1.22.0-2ubuntu2.2 | [unbound-host 1.22.0-2ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-unbound-host-1.22.0-2ubuntu2.2.md) | Oct 22, 2025 |
| Linux | unbound-host Ubuntu 26.04.1 LTS (resolute) | 1.24.2-1ubuntu1 | [unbound-host 1.24.2-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-unbound-host-1.24.2-1ubuntu1.md) | Oct 22, 2025 |
| Linux | unbound-libs RHEL 9 | 0:1.24.2-2.el9 | [RHSA-2026:18931](https://patchblox.com/security/data/fix/linux/rhsa-2026-18931.md) | May 27, 2026 |
| Linux | unbound-libs almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 |
| Linux | unbound-libs almalinux 9 | 1.24.2-2.el9 | [ALSA-2026:18931](https://patchblox.com/security/data/fix/linux/alsa-2026-18931.md) | May 19, 2026 |
| Linux | unbound-libs amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound-libs ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 |
| Linux | unbound-libs ol 9 | 0:1.24.2-2.el9 | [ELSA-2026-18931](https://patchblox.com/security/data/fix/linux/elsa-2026-18931.md) | Jun 12, 2026 |
| Linux | unbound-libs-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound-utils almalinux 10 | 1.24.2-7.el10 | [ALSA-2026:18556](https://patchblox.com/security/data/fix/linux/alsa-2026-18556.md) | May 19, 2026 |
| Linux | unbound-utils amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |
| Linux | unbound-utils ol 10 | 0:1.24.2-7.el10 | [ELSA-2026-18556](https://patchblox.com/security/data/fix/linux/elsa-2026-18556.md) | Jul 8, 2026 |
| Linux | unbound-utils-debuginfo amzn 2023 | 1.17.1-1.amzn2023.0.10 | [ALAS2023-2025-1315](https://patchblox.com/security/data/fix/linux/alas2023-2025-1315.md) | Dec 8, 2025 |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.