TI-2019-15178 CVE-2019-25038 · GHSA-cmj3-c7cr-5q95
Unbound before 1.9.5 allows an integer overflow in a size calculation in…
Priority MEDIUM 54
Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.
RHSA-2022:0632
unbound security update
Released 2022-02-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) python3-unbound-1.7.3-12.el8_2, unbound-1.7.3-12.el8_2, unbound-devel-1.7.3-12.el8_2 +1
Fixes 11 records
TI-2019-15182 CVE-2019-25042 · GHSA-7rfp-f6jm-r63w
Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.
Priority MEDIUM 47
Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.
TI-2019-15179 CVE-2019-25039 · GHSA-gr73-g2gc-58cw
Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.
Priority MEDIUM 47
Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.
TI-2019-15175 CVE-2019-25035 · GHSA-2mgx-qf67-h3rj
Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.
Priority MEDIUM 47
Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.
TI-2019-15174 CVE-2019-25034 · GHSA-qx43-gpvm-wqvr
Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin…
Priority MEDIUM 47
Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write.
TI-2019-15172 CVE-2019-25032 · GHSA-jm8p-cr8m-9qqg
Unbound before 1.9.5 allows an integer overflow in the regional allocator via…
Priority MEDIUM 47
Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.
TI-2019-15177 CVE-2019-25037 · GHSA-gh7v-cx7g-p5jc
Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy…
Priority MEDIUM 43
Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet.
TI-2019-15181 CVE-2019-25041 · GHSA-48rg-6m8g-cqgc
Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.
Priority LOW 37
Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.
TI-2019-15180 CVE-2019-25040 · GHSA-cq2j-hrgf-rxgp
Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy.
Priority LOW 37
Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy.
TI-2019-15176 CVE-2019-25036 · GHSA-mwj4-gg52-v4r2
Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.
Priority LOW 37
Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.
TI-2020-17464 CVE-2020-28935 · GHSA-q92f-7cwj-w4w5
Local symlink attack in Unbound and NSD
Priority LOW 25
NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack.