ALPINE-CVE-2020-12663
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
- Mettez à jour vers 1.8.3-r4
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de unbound
Vulnérabilité publiée pour unbound au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 4
ALPINE-CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Mettez à jour vers 1.8.3-r4
Publication Mise à jourALPINE-CVE-2019-18934
Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
- Mettez à jour vers 1.8.3-r3
Publication Mise à jourALPINE-CVE-2019-16866
Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.
- Mettez à jour vers 1.8.3-r2
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.