Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade unbound | Nov 27, 2019 | Nov 19, 2019 |
| Centos_linux | — | Upgrade python3-unbound-debuginfoUpgrade unbound-develUpgrade unbound-debugsourceUpgrade unbound-libs-debuginfoUpgrade unboundUpgrade unbound-libsUpgrade python3-unboundUpgrade unbound-debuginfo | Apr 29, 2020 | Nov 19, 2019 |
| Debian | — | Upgrade unbound | Jul 30, 2024 | Nov 19, 2019 |
| Freebsd | — | Upgrade unbound | Nov 24, 2019 | Nov 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade unbound-libsUpgrade unbound | Nov 3, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade unboundUpgrade unbound-libs | Sep 28, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade unboundUpgrade unbound-libs | Jun 3, 2020 | Nov 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-unboundUpgrade unboundUpgrade python2-unboundUpgrade unbound-libs | Feb 26, 2020 | Nov 19, 2019 |
| Oracle_linux | — | Upgrade unbound-libsUpgrade unboundUpgrade python3-unboundUpgrade unbound-devel | Oct 5, 2022 | Nov 26, 2019 |
| Redhat_linux | — | No solution existsUpgrade unbound-libsUpgrade unbound-debuginfoUpgrade unboundUpgrade python3-unboundUpgrade unbound-develUpgrade unbound-debugsourceUpgrade python3-unbound-debuginfoUpgrade unbound-libs-debuginfo | Apr 29, 2020 | Nov 19, 2019 |
| Suse | — | Upgrade unbound-pythonUpgrade unbound-anchorUpgrade unboundUpgrade unbound-develUpgrade unbound-muninUpgrade libunbound-devel-miniUpgrade libunbound2 | Jun 30, 2020 | Nov 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub