Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade unbound | Nov 27, 2019 | Nov 19, 2019 |
| Centos_linux | — | Upgrade python3-unboundUpgrade unbound-libs-debuginfoUpgrade unboundUpgrade unbound-debuginfoUpgrade unbound-libsUpgrade unbound-debugsourceUpgrade python3-unbound-debuginfoUpgrade unbound-devel | Apr 29, 2020 | Nov 19, 2019 |
| Debian | — | Upgrade unbound | Jul 30, 2024 | Nov 19, 2019 |
| Freebsd | — | Upgrade unbound | Nov 24, 2019 | Nov 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade unbound-libsUpgrade unbound | Nov 3, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade unboundUpgrade unbound-libs | Sep 28, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade unboundUpgrade unbound-libs | Jun 3, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-unboundUpgrade unboundUpgrade python2-unboundUpgrade unbound-libs | Feb 26, 2020 | Nov 19, 2019 |
| Oracle_linux | — | Upgrade unbound-develUpgrade unboundUpgrade unbound-libsUpgrade python3-unbound | Oct 5, 2022 | Nov 26, 2019 |
| Redhat_linux | — | Upgrade unboundUpgrade unbound-libsUpgrade unbound-develUpgrade python3-unboundUpgrade unbound-debuginfoNo solution existsUpgrade unbound-libs-debuginfoUpgrade python3-unbound-debuginfoUpgrade unbound-debugsource | Apr 29, 2020 | Nov 19, 2019 |
| Suse | — | Upgrade libunbound2Upgrade libunbound-devel-miniUpgrade unbound-muninUpgrade unbound-anchorUpgrade unbound-develUpgrade unboundUpgrade unbound-python | Jun 30, 2020 | Nov 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub