CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 27/04/2021 |
| CVE-2019-25032 | 심각9.8 | Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited | 27/04/2021 |
| CVE-2019-25031 | 보통5.9 | Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that f | 27/04/2021 |
| CVE-2020-28935 | 보통5.5 | NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file | 07/12/2020 |
| CVE-2020-10772 | 높음7.5 | An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound t | 27/11/2020 |
| CVE-2020-17366 | 높음7.4 | An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from th | 05/08/2020 |
| CVE-2020-12663 | 높음7.5 | Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers. | 19/05/2020 |
| CVE-2020-12662 | 높음7.5 | Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records. | 19/05/2020 |
| CVE-2019-18934 | 높음7.3 | Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration. | 19/11/2019 |
| CVE-2013-5661 | 보통5.9 | Cache Poisoning issue exists in DNS Response Rate Limiting. | 05/11/2019 |
| CVE-2019-16866 | 높음7.5 | Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule. | 03/10/2019 |
| CVE-2019-13207 | 심각9.8 | nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c. | 03/07/2019 |
| CVE-2017-15105 | 보통5.3 | A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof. | 23/01/2018 |
| CVE-2017-1000232 | 심각9.8 | A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. | 17/11/2017 |
| CVE-2017-1000231 | 심각9.8 | A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. | 17/11/2017 |
| CVE-2016-6173 | 높음7.5 | NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data. | 09/02/2017 |
| CVE-2014-8602 | 보통4.3 | iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals. | 11/12/2014 |
| CVE-2014-3209 | 낮음2.1 | The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file. | 16/11/2014 |