Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade unbound | Nov 27, 2019 | Nov 19, 2019 |
| Centos_linux | — | Upgrade unbound-debugsourceUpgrade python3-unbound-debuginfoUpgrade unbound-develUpgrade unbound-libs-debuginfoUpgrade unbound-libsUpgrade python3-unboundUpgrade unbound-debuginfoUpgrade unbound | Apr 29, 2020 | Nov 19, 2019 |
| Debian | — | Upgrade unbound | Jul 30, 2024 | Nov 19, 2019 |
| Freebsd | — | Upgrade unbound | Nov 24, 2019 | Nov 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade unbound-libsUpgrade unbound | Nov 3, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade unbound-libsUpgrade unbound | Sep 28, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade unboundUpgrade unbound-libs | Jun 3, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade unbound-libsUpgrade python2-unboundUpgrade unboundUpgrade python3-unbound | Feb 26, 2020 | Nov 19, 2019 |
| Oracle_linux | — | Upgrade unbound-libsUpgrade python3-unboundUpgrade unbound-develUpgrade unbound | Oct 5, 2022 | Nov 26, 2019 |
| Redhat_linux | — | Upgrade unbound-libs-debuginfoUpgrade unbound-debugsourceUpgrade python3-unbound-debuginfoUpgrade unbound-develUpgrade unbound-libsUpgrade unboundUpgrade unbound-debuginfoNo solution existsUpgrade python3-unbound | Apr 29, 2020 | Nov 19, 2019 |
| Suse | — | Upgrade libunbound2Upgrade unbound-muninUpgrade libunbound-devel-miniUpgrade unbound-pythonUpgrade unbound-anchorUpgrade unbound-develUpgrade unbound | Jun 30, 2020 | Nov 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub