unbound Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/unbound/ Sun, 26 Feb 2023 06:36:39 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png unbound Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/unbound/ 32 32 CVE-2020-12663 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12663/ Sun, 26 Feb 2023 06:36:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12663/ Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

The post CVE-2020-12663 appeared first on CVE Vulnerability.

]]> Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

The post CVE-2020-12663 appeared first on CVE Vulnerability.

]]> CVE-2020-12662 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12662/ Sun, 26 Feb 2023 06:36:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12662/ Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an “NXNSAttack” issue. This is triggered by random subdomains in the NSDNAME in NS records.

The post CVE-2020-12662 appeared first on CVE Vulnerability.

]]> Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an “NXNSAttack” issue. This is triggered by random subdomains in the NSDNAME in NS records.

The post CVE-2020-12662 appeared first on CVE Vulnerability.

]]> CVE-2020-10772 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-10772/ Sun, 26 Feb 2023 06:35:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-10772/ An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound that shipped before the […]

The post CVE-2020-10772 appeared first on CVE Vulnerability.

]]> An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound that shipped before the mentioned erratum. This issue is about the incomplete fix for CVE-2020-12662, and it does not affect upstream versions of Unbound.

The post CVE-2020-10772 appeared first on CVE Vulnerability.

]]> CVE-2019-25036 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25036/ Sun, 26 Feb 2023 06:32:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25036/ ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25036 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25036 appeared first on CVE Vulnerability.

]]> CVE-2019-25042 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25042/ Sun, 26 Feb 2023 06:32:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25042/ ** DISPUTED ** Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25042 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25042 appeared first on CVE Vulnerability.

]]> CVE-2019-25041 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25041/ Sun, 26 Feb 2023 06:32:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25041/ ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25041 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25041 appeared first on CVE Vulnerability.

]]> CVE-2019-25040 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25040/ Sun, 26 Feb 2023 06:32:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25040/ ** DISPUTED ** Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25040 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25040 appeared first on CVE Vulnerability.

]]> CVE-2019-25039 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25039/ Sun, 26 Feb 2023 06:32:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25039/ ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25039 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25039 appeared first on CVE Vulnerability.

]]> CVE-2019-25038 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25038/ Sun, 26 Feb 2023 06:32:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25038/ ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25038 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25038 appeared first on CVE Vulnerability.

]]> CVE-2019-25037 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25037/ Sun, 26 Feb 2023 06:32:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25037/ ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25037 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.

The post CVE-2019-25037 appeared first on CVE Vulnerability.

]]>