ALPINE-CVE-2020-12663
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
- Update to 1.8.3-r4
Published Updated
PatchFirst · Latest vulnerabilities
unbound vulnerabilities
Vulnerabilities published for unbound in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
ALPINE-CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Update to 1.8.3-r4
Published UpdatedALPINE-CVE-2019-18934
Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
- Update to 1.8.3-r3
Published UpdatedALPINE-CVE-2019-16866
Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.
- Update to 1.8.3-r2
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.