{"id":"CVE-2019-18934","aliases":["ALPINE-CVE-2019-18934","DEBIAN-CVE-2019-18934","EUVD-2019-8607","GHSA-p35c-m7rx-rcvq","MGASA-2019-0344","OESA-2021-1054","RHSA-2020:1716","SUSE-SU-2020:1772-1","SUSE-SU-2020:1819-1","openSUSE-SU-2020:0912-1","openSUSE-SU-2020:0913-1","openSUSE-SU-2024:11005-1"],"status":"published","title":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code...","description":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03201,"percentile":0.88224,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-78"],"published":"2019-11-19T17:30:01Z","modified":"2026-10-20T10:52:30Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"unbound","fixed_in":["1.9.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"unbound","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"unbound","fixed_in":["1.7.3-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"unbound","fixed_in":["1.8.3-r3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"unbound","fixed_in":["1.9.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"unbound","fixed_in":["1.9.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"unbound","fixed_in":["1.9.6-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"unbound","fixed_in":["1.9.5-1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-unbound","fixed_in":["0:1.7.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-unbound-debuginfo","fixed_in":["0:1.7.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound","fixed_in":["0:1.7.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-debuginfo","fixed_in":["0:1.7.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-debugsource","fixed_in":["0:1.7.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-devel","fixed_in":["0:1.7.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-libs","fixed_in":["0:1.7.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-libs-debuginfo","fixed_in":["0:1.7.3-10.el8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.7.3-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.4"},{"fixed":"1.8.3-r3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-2.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"unbound-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-10.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-10.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-10.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libunbound-devel-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-lp151.8.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-lp151.8.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libunbound-devel-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-lp152.9.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-lp152.9.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"unbound","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2-1.2"}]}],"bundled":6}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"nlnetlabs","product":"unbound"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/11/19/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"https://www.nlnetlabs.nl/downloads/unbound/CVE-2019-18934.txt","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://github.com/NLnetLabs/unbound/blob/release-1.9.5/doc/Changelog","tags":["x_refsource_MISC","x_transferred","Release Notes","advisory"]},{"url":"https://www.nlnetlabs.nl/news/2019/Nov/19/unbound-1.9.5-released/","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MOCR6JP7MSRARTOGEHGST64G4FJGX5VK/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00069.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00067.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18934","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MOCR6JP7MSRARTOGEHGST64G4FJGX5VK/"},{"url":"https://github.com/advisories/GHSA-p35c-m7rx-rcvq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-18934","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-18934","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0344.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25713","tags":["report"]},{"url":"https://nlnetlabs.nl/downloads/unbound/CVE-2019-18934.txt","tags":["advisory","article"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1054","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28935","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1716","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1776762","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1716.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18934","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18934","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201772-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1157268","tags":["report"]},{"url":"https://bugzilla.suse.com/1171889","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12663","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201819-1/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7BOBQ5VCGBBEOIK4YR7ZR7XNQZWV62CU/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T55GJ6QH6PJCNSGR6UDZXXY5UJWCQYT3/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28935","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-18934","description":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","status":"published","published":"2019-11-19T17:30:01Z","modified":"2024-08-05T02:02:39.825Z","updated_at":"2026-11-02T14:32:23.485011Z"}],"euvd":[{"id":"EUVD-2019-8607","description":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","status":"published","published":"2019-11-19T17:30:01Z","modified":"2024-08-05T02:02:39Z","updated_at":"2026-11-03T02:40:26.778341Z"}],"ghsa":[{"id":"GHSA-p35c-m7rx-rcvq","title":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code...","description":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","status":"published","published":"2022-05-24T17:01:35Z","modified":"2023-01-28T05:07:45Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-20","CWE-78"],"updated_at":"2026-11-02T14:44:34.06652Z"}],"nvd":[{"id":"CVE-2019-18934","description":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","status":"published","published":"2019-11-19T18:15:10.523Z","modified":"2026-06-17T02:25:36.22Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:05:37.024431Z"}],"osv":[{"id":"ALPINE-CVE-2019-18934","description":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","status":"published","published":"2019-11-19T18:15:10.523Z","modified":"2026-09-21T06:17:52.507090914Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"CVE-2019-18934","description":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","status":"published","published":"2019-11-19T18:15:10.523Z","modified":"2026-10-20T10:52:30.634341468Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-18934","description":"Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","status":"published","published":"2019-11-19T18:15:10.523Z","modified":"2026-09-21T07:03:12.177605231Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"OESA-2021-1054","title":"unbound security update","description":"Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn't make custom builds or provide specific features to paying customers only.\r\n\r\nSecurity Fix(es):\r\n\r\nNLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file was already present, they would follow symlinks if the file happened to be a symlink instead of a regular file. An additional chown of the file would then take place after it was written, making the user Unbound/NSD is supposed to run as the new owner of the file. If an attacker has local access to the user Unbound/NSD runs as, she could create a symlink in place of the PID file pointing to a file that she would like to erase. If then Unbound/NSD is killed and the PID file is not cleared, upon restarting with root privileges, Unbound/NSD will rewrite any file pointed at by the symlink. This is a local vulnerability that could create a Denial of Service of the system Unbound/NSD is running on. It requires an attacker having access to the limited permission user Unbound/NSD runs as and point through the symlink to a critical file on the system.(CVE-2020-28935)\n\nUnbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.(CVE-2019-18934)","status":"published","published":"2021-03-05T11:04:17Z","modified":"2026-08-18T01:15:16.848938534Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2020:1716","title":"Red Hat Security Advisory: unbound security update","status":"published","published":"2024-09-16T03:24:21Z","modified":"2025-11-22T12:00:17Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"MGASA-2019-0344","title":"Updated unbound packages fix security vulnerability","description":"Updated unbound package to version 1.9.5 to fix a potential security\nvulnerability. In case users recompiled the Mageia package with\n`--enable-ipsecmod`, and ipsecmod is enabled and used in the configuration,\nshell code execution would end up being possible after receiving a\nspecially crafted answer (CVE-2019-18934).\n","status":"published","published":"2019-11-30T13:06:06Z","modified":"2026-04-16T04:43:03.173716227Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0912-1","title":"Security update for unbound","description":"This update for unbound fixes the following issues:\n\n- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying \n  an incoming query into a large number of queries directed to a target (bsc#1171889).\n- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers \n  could have been used to make unbound unresponsive (bsc#1171889).\t  \n- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed \n  code execution after receiving a special crafted answer (bsc#1157268).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-06-29T18:20:25Z","modified":"2026-02-04T02:14:26.518116Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0913-1","title":"Security update for unbound","description":"This update for unbound fixes the following issues:\n\n- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying \n  an incoming query into a large number of queries directed to a target (bsc#1171889).\n- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers \n  could have been used to make unbound unresponsive (bsc#1171889).\t  \n- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed \n  code execution after receiving a special crafted answer (bsc#1157268).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-06-29T18:20:32Z","modified":"2026-02-04T02:20:00.22538Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11005-1","title":"libunbound8-1.13.2-1.2 on GA media","description":"These are all security issues fixed in the libunbound8-1.13.2-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:26:18.219061Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:1772-1","title":"Security update for unbound","description":"This update for unbound fixes the following issues:\n\n- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying \n  an incoming query into a large number of queries directed to a target (bsc#1171889).\n- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers \n  could have been used to make unbound unresponsive (bsc#1171889).\t  \n- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed \n  code execution after receiving a special crafted answer (bsc#1157268).\n","status":"published","published":"2020-06-26T06:05:15Z","modified":"2026-02-04T03:40:15.479853Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1819-1","title":"Security update for unbound","description":"This update for unbound fixes the following issues:\n\t  \n- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying \n  an incoming query into a large number of queries directed to a target (bsc#1171889).\n- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers \n  could have been used to make unbound unresponsive (bsc#1171889).\t  \n- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed \n  code execution after receiving a special crafted answer (bsc#1157268).\n","status":"published","published":"2020-07-01T14:19:58Z","modified":"2026-02-04T02:39:24.796302Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}