Every CVE Search/ Get API key

CVE-2019-25031

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a...

5.9 MediumFix availableDisputed

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

1.68%Up 1.3 points since Apr 27, 2021
90%50%10%1%

What each source reports

NVD Score used 5.9

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

Record
CVE-2019-25031
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-74
Updated
2026-11-02
CVE List No score

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

Record
CVE-2019-25031
Updated
2026-11-02
EUVDEUVD-2019-11481 No score

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

Record
EUVD-2019-11481
Updated
2026-11-03
GitHub AdvisoriesGHSA-9vvw-9wr3-56v3 5.9

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a...

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session.

Record
GHSA-9vvw-9wr3-56v3
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-74
Updated
2026-11-02
OSV 5.9

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

Record
CVE-2019-25031
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2019-25031 5.9

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

Record
DEBIAN-CVE-2019-25031
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 6 moreShow less
OSVUBUNTU-CVE-2019-25031 5.9

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

Record
UBUNTU-CVE-2019-25031
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2022:0176-1 No score

Security update for unbound

This update for unbound fixes the following issues:

  • CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).
  • CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).
  • CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).
  • CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).
  • CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).
  • CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).
  • CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).
  • CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).
  • CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).
  • CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).
  • CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).
  • CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).
  • CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).
Record
openSUSE-SU-2022:0176-1
Updated
2026-11-02
OSVSUSE-SU-2022:0176-1 No score

Security update for unbound

This update for unbound fixes the following issues:

  • CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).
  • CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).
  • CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).
  • CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).
  • CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).
  • CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).
  • CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).
  • CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).
  • CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).
  • CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).
  • CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).
  • CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).
  • CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).
Record
SUSE-SU-2022:0176-1
Updated
2026-11-02
OSVSUSE-SU-2022:0176-2 No score

Security update for unbound

This update for unbound fixes the following issues:

  • CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).
  • CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).
  • CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).
  • CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).
  • CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).
  • CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).
  • CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).
  • CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).
  • CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).
  • CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).
  • CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).
  • CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).
  • CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).
Record
SUSE-SU-2022:0176-2
Updated
2026-11-02
OSVSUSE-SU-2022:0301-1 No score

Security update for unbound

This update for unbound fixes the following issues:

  • CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).
  • CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).
  • CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).
  • CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).
  • CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).
  • CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).
  • CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).
  • CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).
  • CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).
  • CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).
  • CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).
  • CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).
  • CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).
Record
SUSE-SU-2022:0301-1
Updated
2026-11-02
OSVUSN-4938-1 No score

unbound vulnerabilities

It was discovered that Unbound contained multiple security issues. A remote attacker could possibly use these issues to cause a denial of service, inject arbitrary commands, execute arbitrary code, and overwrite local files.

Record
USN-4938-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
unbound
Debian:12
 before 1.9.6-1
1.9.6-1
unbound
Debian:13
 before 1.9.6-1
1.9.6-1
unbound
Debian:14
 before 1.9.6-1
1.9.6-1
unbound1.9
Debian:9
From an advisory covering 12 CVEs
 before 1.9.0-2+deb10u2~deb9u2
1.9.0-2+deb10u2~deb9u2
unbound
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
Show 20 moreShow less
Affected packages
PackageAffectedFixed
unbound
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Manager Proxy 4.1
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Manager Server 4.1
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Enterprise Storage 6
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Enterprise Storage 7
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise Real Time 15 SP2
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1
unbound
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 13 CVEs
 before 1.6.8-3.9.1
1.6.8-3.9.1
unbound
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 13 CVEs
 before 1.6.8-3.9.1
1.6.8-3.9.1
unbound
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 13 CVEs
 before 1.6.8-3.9.1
1.6.8-3.9.1
unbound
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 13 CVEs
 before 1.6.8-3.9.1
1.6.8-3.9.1
unbound
Ubuntu:18.04:LTS
 before 1.6.7-1ubuntu2.4, plus listed versions
1.6.5-11.6.7-11.6.7-1build11.6.7-1ubuntu11.6.7-1ubuntu21.6.7-1ubuntu2.11.6.7-1ubuntu2.21.6.7-1ubuntu2.3
1.6.7-1ubuntu2.4
unbound
Ubuntu:20.04:LTS
 before 1.9.4-2ubuntu1.2, plus listed versions
1.9.0-2ubuntu11.9.0-2ubuntu21.9.4-21.9.4-2ubuntu11.9.4-2ubuntu1.1
1.9.4-2ubuntu1.2
unbound
Ubuntu:18.04:LTS
From an advisory covering 13 CVEs
 before 1.6.7-1ubuntu2.4, plus listed versions
1.6.5-11.6.7-11.6.7-1build11.6.7-1ubuntu11.6.7-1ubuntu21.6.7-1ubuntu2.11.6.7-1ubuntu2.21.6.7-1ubuntu2.3
1.6.7-1ubuntu2.4
unbound
Ubuntu:20.04:LTS
From an advisory covering 13 CVEs
 before 1.9.4-2ubuntu1.2, plus listed versions
1.9.0-2ubuntu11.9.0-2ubuntu21.9.4-21.9.4-2ubuntu11.9.4-2ubuntu1.1
1.9.4-2ubuntu1.2
unbound
openSUSE:Leap 15.3
From an advisory covering 13 CVEs
 before 1.6.8-10.6.1
1.6.8-10.6.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-25031 is a medium vulnerability (CVSS 5.9) in Nlnetlabs Unbound, published April 27, 2021. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 76th percentile. Fixed in unbound 1.9.6-1.

References

Show 48 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open