unbound vulnerabilities (Rocky Linux)
32 vulnerabilities.
-
unboundRocky Linux CNAME synthesis could lead to heap corruption 8.4 High -
unboundRocky Linux Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY 9.1 Critical -
unboundRocky Linux Possible heap buffer overflow during DNSSEC canonicalization 7.5 High -
unboundRocky Linux 'dns-error-reporting: yes' leads to stack buffer overflow 7.5 High -
unboundRocky Linux Possible cache poisoning attack by mapping source port population per thread 5.7 Medium -
unboundRocky Linux Cross-zone wildcard cache poisoning via RRSIG.labels manipulation 7.5 High -
unboundRocky Linux Unbounded name compression in certain cases causes degradation of service 6.9 Medium -
unboundRocky Linux Crash during DNSSEC validation of malicious content 8.7 High -
unboundRocky Linux Heap overflow with multiple NSID, COOKIE, PADDING EDNS options 8.7 High -
unboundRocky Linux Jostle logic bypass degrades resolution performance 6.9 Medium -
unboundRocky Linux Long list of incoming EDNS options degrades performance 6.6 Medium -
unboundRocky Linux Another 'ghost domain names' attack variant 6.6 Medium -
unboundRocky Linux Possible arbitrary code execution during DNSSEC validation 9.1 Critical -
unboundRocky Linux Possible domain hijacking via promiscuous records in the authority section 5.7 Medium -
unboundRocky Linux Cache poisoning via the ECS-enabled Rebirthday Attack 8.7 High -
unboundRocky Linux Unbounded name compression could lead to Denial of Service 5.3 Medium -
unboundRocky Linux The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service ... 7.5 High -
unboundRocky Linux Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation 8.0 High -
unboundRocky Linux NRDelegation Attack 7.5 High -
unboundRocky Linux Novel "ghost domain names" attack by updating almost expired delegation information 6.5 Medium -
unboundRocky Linux Novel "ghost domain names" attack by introducing subdomain delegations 6.5 Medium -
unboundRocky Linux Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. 9.8 Critical -
unboundRocky Linux Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an... 9.8 Critical -
unboundRocky Linux Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. 9.8 Critical -
unboundRocky Linux Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. 7.5 High -
unboundRocky Linux Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an... 7.5 High -
unboundRocky Linux Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. 9.8 Critical -
unboundRocky Linux Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. 9.8 Critical -
unboundRocky Linux Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. 7.5 High -
unboundRocky Linux Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. 7.5 High -
unboundRocky Linux Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. 9.8 Critical -
unboundRocky Linux Local symlink attack in Unbound and NSD 5.5 Medium