Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade unbound | Nov 27, 2019 | Nov 19, 2019 |
| Centos_linux | — | Upgrade unbound-debugsourceUpgrade unbound-develUpgrade python3-unbound-debuginfoUpgrade unbound-libs-debuginfoUpgrade python3-unboundUpgrade unbound-libsUpgrade unboundUpgrade unbound-debuginfo | Apr 29, 2020 | Nov 19, 2019 |
| Debian | — | Upgrade unbound | Jul 30, 2024 | Nov 19, 2019 |
| Freebsd | — | Upgrade unbound | Nov 24, 2019 | Nov 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade unbound-libsUpgrade unbound | Nov 3, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade unbound-libsUpgrade unbound | Sep 28, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade unboundUpgrade unbound-libs | Jun 3, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-unboundUpgrade unboundUpgrade python2-unboundUpgrade unbound-libs | Feb 26, 2020 | Nov 19, 2019 |
| Oracle_linux | — | Upgrade python3-unboundUpgrade unbound-develUpgrade unbound-libsUpgrade unbound | Oct 5, 2022 | Nov 26, 2019 |
| Redhat_linux | — | Upgrade unbound-libs-debuginfoUpgrade unbound-debugsourceUpgrade python3-unbound-debuginfoNo solution existsUpgrade unbound-debuginfoUpgrade python3-unboundUpgrade unbound-libsUpgrade unbound-develUpgrade unbound | Apr 29, 2020 | Nov 19, 2019 |
| Suse | — | Upgrade unbound-muninUpgrade libunbound-devel-miniUpgrade libunbound2Upgrade unboundUpgrade unbound-anchorUpgrade unbound-develUpgrade unbound-python | Jun 30, 2020 | Nov 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub