Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
References
Link | Resource |
---|---|
https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html | Mailing List Third Party Advisory |
https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/ | Patch Third Party Advisory |
https://security.netapp.com/advisory/ntap-20210507-0007/ | Third Party Advisory |
Configurations
History
07 Nov 2023, 03:09
Type | Values Removed | Values Added |
---|---|---|
Summary | Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited |
Information
Published : 2021-04-27 06:15
Updated : 2024-08-05 03:16
NVD link : CVE-2019-25037
Mitre link : CVE-2019-25037
CVE.ORG link : CVE-2019-25037
JSON object : View
Products Affected
nlnetlabs
- unbound
debian
- debian_linux
CWE
CWE-617
Reachable Assertion