Search for packages
| purl | pkg:deb/debian/unbound@1.13.1-1%2Bdeb11u2 |
| Next non-vulnerable version | 1.17.1-2+deb12u4 |
| Latest non-vulnerable version | 1.17.1-2+deb12u4 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4etu-cddt-sbfm
Aliases: CVE-2024-8508 |
unbound: Unbounded name compression could lead to Denial of Service |
Affected by 0 other vulnerabilities. |
|
VCID-4sax-ynvh-abed
Aliases: CVE-2025-5994 |
unbound: Unbound Cache poisoning |
Affected by 0 other vulnerabilities. |
|
VCID-b7b8-guvx-3bhy
Aliases: CVE-2024-43168 |
unbound: Heap-Buffer-Overflow in Unbound |
Affected by 0 other vulnerabilities. |
|
VCID-cjha-wacb-mqds
Aliases: CVE-2024-33655 |
unbound: DNSBomb vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-pc5g-wqzg-rfhu
Aliases: CVE-2025-11411 |
unbound: Unbound domain hijacking via promiscuous records |
Affected by 0 other vulnerabilities. |
|
VCID-zjjk-kfsd-e7ck
Aliases: CVE-2024-43167 |
unbound: NULL Pointer Dereference in Unbound |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2d5q-y4tv-ukgb | unbound: out-of-bounds write in sldns_bget_token_par |
CVE-2019-25035
|
| VCID-3e4q-7bsf-fyh2 | unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query |
CVE-2019-16866
|
| VCID-66sa-bc5p-jqde | Multiple vulnerabilities have been discovered in Dnsmasq, the worst of which could lead to a denial of service. |
CVE-2023-50387
|
| VCID-6wjx-c9v1-nqf9 | Multiple vulnerabilities have been discovered in Unbound, the worst of which could result in denial of service. |
CVE-2022-30698
|
| VCID-a58b-qqsv-9fec | unbound: infinite loop via a compressed name in dname_pkt_copy |
CVE-2019-25040
|
| VCID-am4a-hwtd-uybh | unbound: integer overflow in the regional allocator via the ALIGN_UP macro |
CVE-2019-25033
|
| VCID-awc5-73ya-6faa | Multiple vulnerabilities have been discovered in Unbound, the worst of which could result in denial of service. |
CVE-2022-30699
|
| VCID-dc9g-bdph-9qa3 | unbound: assertion failure via a compressed name in dname_pkt_copy |
CVE-2019-25041
|
| VCID-dnkp-t2z3-gbcm | unbound: assertion failure and denial of service in synth_cname |
CVE-2019-25036
|
| VCID-e25c-xfn1-1bhn | unbound: infinite loop via malformed DNS answers received from upstream servers |
CVE-2020-12663
|
| VCID-e3w8-8bks-rbg6 | A vulnerability was discovered in NSD which could allow a local attacker to cause a Denial of Service condition. |
CVE-2020-28935
|
| VCID-f23u-dymp-63c9 | unbound: configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session |
CVE-2019-25031
|
| VCID-fwbt-2wnn-p3cw | unbound: integer overflow in the regional allocator via regional_alloc |
CVE-2019-25032
|
| VCID-kzmv-f7dr-uqcm | unbound: amplification of an incoming query into a large number of queries directed to a target |
CVE-2020-12662
|
| VCID-nrbr-ruhk-8khx | unbound: assertion failure and denial of service in dname_pkt_copy via an invalid packet |
CVE-2019-25037
|
| VCID-pb7a-j1ff-dbf7 | unbound: out-of-bounds write via a compressed name in rdata_copy |
CVE-2019-25042
|
| VCID-pquu-mx3q-2bay | unbound: command injection with data coming from a specially crafted IPSECKEY answer |
CVE-2019-18934
|
| VCID-qtvr-wfa9-qke6 | unbound: integer overflow in a size calculation in dnscrypt/dnscrypt.c |
CVE-2019-25038
|
| VCID-twch-y9hk-ybew | unbound: integer overflow in a size calculation in respip/respip.c |
CVE-2019-25039
|
| VCID-u811-711b-87c4 | unbound: integer overflow in sldns_str2wire_dname_buf_origin can lead to an out-of-bounds write |
CVE-2019-25034
|
| VCID-vprj-j7u6-zbe7 | Multiple vulnerabilities have been discovered in Dnsmasq, the worst of which could lead to a denial of service. |
CVE-2023-50868
|
| VCID-ywzz-4ya4-cyh9 | Multiple vulnerabilities have been discovered in Unbound, the worst of which could result in denial of service. |
CVE-2022-3204
|