Debian Unbound vulnerabilities

CVE-2019-25036 [HIGH] CVE-2019-25036: unbound - Unbound before 1.9.5 allows an assertion failure and denial of service in synth_... Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited Scope: local bookworm: resolved (fixed in 1.9.6-1) bullseye: resolved (fixed in 1.9.6-1) forky: resolved (fixed in 1.

CVE-2022-30699 [MEDIUM] CVE-2022-30699: unbound - NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel... NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue nameserver delays the response so that the cached delegation information i

CVE-2009-3602 [HIGH] CVE-2009-3602: unbound - Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, whic... Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses. Scope: local bookworm: resolved (fixed in 1.3.4-1) bullseye: resolved (fixed in 1.3.4-1) forky: resolved (fixed in 1.3.4-1)

CVE-2022-30698 [MEDIUM] CVE-2022-30698: unbound - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel ... NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain that updates Unbound's delegation cache. This action can b

CVE-2014-8602 [MEDIUM] CVE-2014-8602: unbound - iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining... iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals. Scope: local bookworm: resolved (fixed in 1.4.22-3) bullseye: resolved (fixed in 1.4.22-3) forky: resolved (fixed in 1.4.22-3) sid: resolved (fixed in 1.

CVE-2011-4869 [MEDIUM] CVE-2011-4869: unbound - validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof... validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528. Scope: local bookworm: resolved (fixed in 1.4.14-1) bullseye: resolved

CVE-2019-25031 [MEDIUM] CVE-2019-25031: unbound - Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers... Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. I

CVE-2025-11411 [MEDIUM] CVE-2025-11411: unbound - NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible ... NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are used to update the resolver's knowledge of the zone's name servers. A

CVE-2024-8508 [MEDIUM] CVE-2024-8508: unbound - NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability w... NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventu

CVE-2017-15105 [MEDIUM] CVE-2017-15105: unbound - A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized ... A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof. Scope: local bookworm: resolved (fixed in 1.7.1-1) bullseye: resolved (fixed in 1.7.1-1)

CVE-2024-43168 [MEDIUM] CVE-2024-43168: unbound - DISPUTE NOTE: this issue does not pose a security risk as it (according to analy... DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer, NLnet Labs) falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet Labs has no further information about the claim, and suggests that

CVE-2011-1922 [MEDIUM] CVE-2011-1922: unbound - daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and t... daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling. Scope: local bookworm: resolved (fixed in 1.4.10-1) bullseye: resolved (fixed in 1.4.10-1)

CVE-2011-4528 [MEDIUM] CVE-2011-4528: unbound - Unbound before 1.4.13p2 attempts to free unallocated memory during processing of... Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response. Scope: local bookworm: resolved (fixed in 1.4.14-1) bullseye: resolved (fixed in 1.4.14-1) forky: resolved (fixed in 1.4.14-1) sid: resolved (fix

CVE-2020-28935 [MEDIUM] CVE-2020-28935: nsd - NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up t... NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file was already present, they would follow symlinks if

CVE-2009-4008 [MEDIUM] CVE-2009-4008: unbound - Unbound before 1.4.4 does not send responses for signed zones after mishandling ... Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query. Scope: local bookworm: resolved (fixed in 1.4.4-1) bullseye: resolved (fixed in 1.4.4-1) forky: resolved (fixed in 1.4.4-1) sid: resolved (fixed in 1.4.4-1) trixie: resol

CVE-2010-0969 [MEDIUM] CVE-2010-0969: unbound - Unbound before 1.4.3 does not properly align structures on 64-bit platforms, whi... Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Scope: local bookworm: resolved (fixed in 1.4.3-1) bullseye: resolved (fixed in 1.4.3-1) forky: resolved (fixed in 1.4.3-1) sid: resolved (fixed in 1.4.3-1) trixie: resolved (fixed in 1.4.3-1)

CVE-2024-43167 [LOW] CVE-2024-43167: unbound - DISPUTE NOTE: this issue does not pose a security risk as it (according to analy... DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer, NLnet Labs) falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet Labs has no further information about the claim, and suggests that af