Alpine Linux unbound CVE-2025-11411

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 23:04 vuln.today

DescriptionCVE.org

Alpine Linux: unbound fixed in 1.24.1-r0

AnalysisAI

Unbound DNS resolver on Alpine Linux received a security fix in package version 1.24.1-r0, addressing an undisclosed vulnerability. The nature, impact class, and exploitability of the underlying flaw are not described in available data - only the patched Alpine package version is confirmed. EPSS stands at 0.07% (22nd percentile), suggesting low current exploitation probability, and this CVE does not appear in the CISA KEV catalog.

Technical ContextAI

Unbound is a validating, recursive, and caching DNS resolver developed by NLnet Labs, widely deployed in Alpine Linux environments. The affected component is the Alpine Linux packaging of unbound, fixed at Alpine package version 1.24.1-r0. No CWE root cause classification is available, and no CVSS vector has been assigned, making it impossible to determine the vulnerability class (e.g., memory corruption, logic error, input validation) from provided data alone. Alpine Linux packaging advisories sometimes bundle upstream CVEs; the upstream unbound project version corresponding to this fix is not specified in the available intelligence.

Affected ProductsAI

The confirmed affected product is the unbound DNS resolver as packaged by Alpine Linux, prior to package version 1.24.1-r0. No CPE strings are available in the provided data. The specific upstream unbound software version range, affected Alpine Linux branch or release series, and whether other Linux distributions are impacted are all unknown at time of analysis. Administrators should consult the Alpine Linux security advisories at https://security.alpinelinux.org for definitive scope information.

RemediationAI

Upgrade the Alpine Linux unbound package to version 1.24.1-r0 or later using the standard Alpine package manager: 'apk upgrade unbound'. This is the only confirmed fix identified from available data. No upstream unbound project advisory URL or alternative workaround information is present in the provided intelligence. Because the vulnerability type is unknown, specific compensating controls cannot be responsibly prescribed without risking under- or over-mitigation. As a general precaution for DNS resolver exposure, administrators should ensure unbound is not unnecessarily accessible from untrusted network segments and review access control configurations pending further vendor disclosure.