Search for packages
| purl | pkg:deb/debian/unbound@1.9.0-2%2Bdeb10u2 |
| Next non-vulnerable version | 1.17.1-2+deb12u4 |
| Latest non-vulnerable version | 1.17.1-2+deb12u4 |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2d5q-y4tv-ukgb
Aliases: CVE-2019-25035 |
unbound: out-of-bounds write in sldns_bget_token_par |
Affected by 6 other vulnerabilities. |
|
VCID-3e4q-7bsf-fyh2
Aliases: CVE-2019-16866 |
unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query |
Affected by 6 other vulnerabilities. |
|
VCID-4etu-cddt-sbfm
Aliases: CVE-2024-8508 |
unbound: Unbounded name compression could lead to Denial of Service |
Affected by 0 other vulnerabilities. |
|
VCID-4sax-ynvh-abed
Aliases: CVE-2025-5994 |
unbound: Unbound Cache poisoning |
Affected by 0 other vulnerabilities. |
|
VCID-66sa-bc5p-jqde
Aliases: CVE-2023-50387 |
Multiple vulnerabilities have been discovered in Dnsmasq, the worst of which could lead to a denial of service. |
Affected by 6 other vulnerabilities. |
|
VCID-6wjx-c9v1-nqf9
Aliases: CVE-2022-30698 |
Multiple vulnerabilities have been discovered in Unbound, the worst of which could result in denial of service. |
Affected by 6 other vulnerabilities. |
|
VCID-a58b-qqsv-9fec
Aliases: CVE-2019-25040 |
unbound: infinite loop via a compressed name in dname_pkt_copy |
Affected by 6 other vulnerabilities. |
|
VCID-am4a-hwtd-uybh
Aliases: CVE-2019-25033 |
unbound: integer overflow in the regional allocator via the ALIGN_UP macro |
Affected by 6 other vulnerabilities. |
|
VCID-awc5-73ya-6faa
Aliases: CVE-2022-30699 |
Multiple vulnerabilities have been discovered in Unbound, the worst of which could result in denial of service. |
Affected by 6 other vulnerabilities. |
|
VCID-b7b8-guvx-3bhy
Aliases: CVE-2024-43168 |
unbound: Heap-Buffer-Overflow in Unbound |
Affected by 0 other vulnerabilities. |
|
VCID-cjha-wacb-mqds
Aliases: CVE-2024-33655 |
unbound: DNSBomb vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-dc9g-bdph-9qa3
Aliases: CVE-2019-25041 |
unbound: assertion failure via a compressed name in dname_pkt_copy |
Affected by 6 other vulnerabilities. |
|
VCID-dnkp-t2z3-gbcm
Aliases: CVE-2019-25036 |
unbound: assertion failure and denial of service in synth_cname |
Affected by 6 other vulnerabilities. |
|
VCID-e25c-xfn1-1bhn
Aliases: CVE-2020-12663 |
unbound: infinite loop via malformed DNS answers received from upstream servers |
Affected by 6 other vulnerabilities. |
|
VCID-e3w8-8bks-rbg6
Aliases: CVE-2020-28935 |
A vulnerability was discovered in NSD which could allow a local attacker to cause a Denial of Service condition. |
Affected by 6 other vulnerabilities. |
|
VCID-f23u-dymp-63c9
Aliases: CVE-2019-25031 |
unbound: configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session |
Affected by 6 other vulnerabilities. |
|
VCID-fwbt-2wnn-p3cw
Aliases: CVE-2019-25032 |
unbound: integer overflow in the regional allocator via regional_alloc |
Affected by 6 other vulnerabilities. |
|
VCID-kzmv-f7dr-uqcm
Aliases: CVE-2020-12662 |
unbound: amplification of an incoming query into a large number of queries directed to a target |
Affected by 6 other vulnerabilities. |
|
VCID-nrbr-ruhk-8khx
Aliases: CVE-2019-25037 |
unbound: assertion failure and denial of service in dname_pkt_copy via an invalid packet |
Affected by 6 other vulnerabilities. |
|
VCID-pb7a-j1ff-dbf7
Aliases: CVE-2019-25042 |
unbound: out-of-bounds write via a compressed name in rdata_copy |
Affected by 6 other vulnerabilities. |
|
VCID-pc5g-wqzg-rfhu
Aliases: CVE-2025-11411 |
unbound: Unbound domain hijacking via promiscuous records |
Affected by 0 other vulnerabilities. |
|
VCID-pquu-mx3q-2bay
Aliases: CVE-2019-18934 |
unbound: command injection with data coming from a specially crafted IPSECKEY answer |
Affected by 6 other vulnerabilities. |
|
VCID-qtvr-wfa9-qke6
Aliases: CVE-2019-25038 |
unbound: integer overflow in a size calculation in dnscrypt/dnscrypt.c |
Affected by 6 other vulnerabilities. |
|
VCID-twch-y9hk-ybew
Aliases: CVE-2019-25039 |
unbound: integer overflow in a size calculation in respip/respip.c |
Affected by 6 other vulnerabilities. |
|
VCID-u811-711b-87c4
Aliases: CVE-2019-25034 |
unbound: integer overflow in sldns_str2wire_dname_buf_origin can lead to an out-of-bounds write |
Affected by 6 other vulnerabilities. |
|
VCID-vprj-j7u6-zbe7
Aliases: CVE-2023-50868 |
Multiple vulnerabilities have been discovered in Dnsmasq, the worst of which could lead to a denial of service. |
Affected by 6 other vulnerabilities. |
|
VCID-ywzz-4ya4-cyh9
Aliases: CVE-2022-3204 |
Multiple vulnerabilities have been discovered in Unbound, the worst of which could result in denial of service. |
Affected by 6 other vulnerabilities. |
|
VCID-zjjk-kfsd-e7ck
Aliases: CVE-2024-43167 |
unbound: NULL Pointer Dereference in Unbound |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3e4q-7bsf-fyh2 | unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query |
CVE-2019-16866
|
| VCID-e25c-xfn1-1bhn | unbound: infinite loop via malformed DNS answers received from upstream servers |
CVE-2020-12663
|
| VCID-kzmv-f7dr-uqcm | unbound: amplification of an incoming query into a large number of queries directed to a target |
CVE-2020-12662
|
| VCID-ta1t-nmud-eudt | unbound: Improper validation of wildcard synthesized NSEC records |
CVE-2017-15105
|