CVE-2019-18934
19.11.2019, 18:15
Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| nlnetlabs | unbound | 1.6.4 ≤ 𝑥 ≤ 1.9.4 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libunbound2 |
| ||||||||||||||||||||||||||||||||||||||||||||
| libunbound8 |
| ||||||||||||||||||||||||||||||||||||||||||||
| unbound-anchor |
| ||||||||||||||||||||||||||||||||||||||||||||
| unbound-devel |
|
Red Hat Enterprise Linux Releases
References