Summary
It was discovered that Unbound contained multiple security issues. A
remote attacker could possibly use these issues to cause a denial of
service, inject arbitrary commands, execute arbitrary code, and overwrite
local files.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | unbound | 1.6.7-1ubuntu2.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | unbound | 1.9.4-2ubuntu1.2 |
Vulnerabilities 13
-
Unscored —
Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle…
-
Unscored —
Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes…
-
Unscored —
Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor disp…
-
Unscored —
Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. …
-
Unscored —
Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. NOTE: The vendor disputes that this is a vu…
-
Unscored —
Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that t…
-
Unscored —
Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: T…
-
Unscored —
Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes…
-
Unscored —
Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes tha…
-
Unscored —
Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that th…
-
Unscored —
Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes tha…
-
Unscored —
Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that …
-
Unscored —
Local symlink attack in Unbound and NSD
NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not t…
References
-
report
https://ubuntu.com/security/CVE-2019-25031
-
report
https://ubuntu.com/security/CVE-2019-25032
-
report
https://ubuntu.com/security/CVE-2019-25033
-
report
https://ubuntu.com/security/CVE-2019-25034
-
report
https://ubuntu.com/security/CVE-2019-25035
-
report
https://ubuntu.com/security/CVE-2019-25036
-
report
https://ubuntu.com/security/CVE-2019-25037
-
report
https://ubuntu.com/security/CVE-2019-25038
-
report
https://ubuntu.com/security/CVE-2019-25039
-
report
https://ubuntu.com/security/CVE-2019-25040
-
report
https://ubuntu.com/security/CVE-2019-25041
-
report
https://ubuntu.com/security/CVE-2019-25042
-
report
https://ubuntu.com/security/CVE-2020-28935