ALPINE-CVE-2020-12663
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
- Обновитесь до 1.8.3-r4
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости unbound
За последние 30 дней в unbound опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 4
ALPINE-CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
- Обновитесь до 1.8.3-r4
Опубликовано ОбновленоALPINE-CVE-2019-18934
Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
- Обновитесь до 1.8.3-r3
Опубликовано ОбновленоALPINE-CVE-2019-16866
Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.
- Обновитесь до 1.8.3-r2
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.