CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 27/04/2021 |
| CVE-2019-25032 | KRITISCH9.8 | Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited | 27/04/2021 |
| CVE-2019-25031 | MITTEL5.9 | Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that f | 27/04/2021 |
| CVE-2020-28935 | MITTEL5.5 | NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file | 07/12/2020 |
| CVE-2020-10772 | HOCH7.5 | An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound t | 27/11/2020 |
| CVE-2020-17366 | HOCH7.4 | An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from th | 05/08/2020 |
| CVE-2020-12663 | HOCH7.5 | Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers. | 19/05/2020 |
| CVE-2020-12662 | HOCH7.5 | Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records. | 19/05/2020 |
| CVE-2019-18934 | HOCH7.3 | Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration. | 19/11/2019 |
| CVE-2013-5661 | MITTEL5.9 | Cache Poisoning issue exists in DNS Response Rate Limiting. | 05/11/2019 |
| CVE-2019-16866 | HOCH7.5 | Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule. | 03/10/2019 |
| CVE-2019-13207 | KRITISCH9.8 | nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c. | 03/07/2019 |
| CVE-2017-15105 | MITTEL5.3 | A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof. | 23/01/2018 |
| CVE-2017-1000232 | KRITISCH9.8 | A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. | 17/11/2017 |
| CVE-2017-1000231 | KRITISCH9.8 | A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. | 17/11/2017 |
| CVE-2016-6173 | HOCH7.5 | NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data. | 09/02/2017 |
| CVE-2014-8602 | MITTEL4.3 | iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals. | 11/12/2014 |
| CVE-2014-3209 | NIEDRIG2.1 | The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file. | 16/11/2014 |