Skip to contentNlnetlabs Unbound vulnerabilities
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.CVE-2019-25032Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.CVE-2019-25033Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an...CVE-2019-25034Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.CVE-2019-25035Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.CVE-2019-25036Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an...CVE-2019-25037Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.CVE-2019-25038Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.CVE-2019-25039Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy.CVE-2019-25040Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.CVE-2019-25041Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.CVE-2019-25042Fix availableDisputed9.8 Critical
- nlnet labs nsd, unbound, debian linux +1 more +3 moreLocal symlink attack in Unbound and NSDCVE-2020-28935Fix available5.5 Medium
- nlnet labs unboundAn incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as...CVE-2020-10772Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.CVE-2020-12663Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...CVE-2020-12662Fix available7.5 High
- nlnetlabs unbound, fedoraproject fedora, opensuse leap +2 moreUnbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code...CVE-2019-18934Fix available7.3 High
- nlnetlabs unbound, canonical ubuntu linux +1 moreUnbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a...CVE-2019-16866Fix available7.5 High
- nlnet labs unbound, canonical ubuntu linux, debian linux +2 moreA flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An...CVE-2017-15105Fix available5.3 Medium
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 moreiterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows...CVE-2014-8602Fix availableEPSS 32.2%4.3 Medium
- nlnetlabs unbounddaemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface...CVE-2011-1922Fix available4.3 Medium
- nlnetlabs unboundUnbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified...CVE-2009-4008Fix available5.0 Medium
- nlnetlabs unboundUnbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote...CVE-2010-0969Fix available5.0 Medium
- nlnetlabs unboundUnbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote...CVE-2009-3602Fix available7.5 High