The vulnerability in the `create_unbound_ad_servers.sh` component relates to the Unbound DNS server, allowing a attacker to compromise data integrity.

🗓️ 22 Nov 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Vulnerability in create_unbound_ad_servers.sh in Unbound Domain Name System causes remote data integrity compromise due to insufficient input sanitization.

Reporter	Title	Published	Views	Family All 81
AstraLinux	Astra Linux - уязвимость в unbound	20 May 202605:53	–	astralinux
Cloud Foundry	USN-4938-1: Unbound vulnerabilities \| Cloud Foundry	11 Jun 202100:00	–	cloudfoundry
CNNVD	NLnet Labs Unbound 注入漏洞	27 Apr 202100:00	–	cnnvd
CNVD	Unbound Configuration Injection Vulnerability	28 Apr 202100:00	–	cnvd
CVE	CVE-2019-25031	27 Apr 202105:18	–	cve
Cvelist	CVE-2019-25031	27 Apr 202105:18	–	cvelist
Debian	[SECURITY] [DLA 2652-1] unbound1.9 security update	6 May 202121:58	–	debian
Debian CVE	CVE-2019-25031	27 Apr 202105:18	–	debiancve
Tenable Nessus	Debian DLA-2652-1 : unbound1.9 security update	7 May 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : unbound (EulerOS-SA-2021-2124)	2 Jul 202100:00	–	nessus

Vulners

Node

stichting_nlnet_labs unboundRange<1.9.5

Source	Link
github	www.github.com/NLnetLabs/unbound/commit/f887552763477a606a9608b0f6b498685e0f6587
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-25031
ostif	www.ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/
ostif	www.ostif.org/wp-content/uploads/2019/12/X41-Unbound-Security-Audit-2019-Final-Report.pdf
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-25031
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1110SE17
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47
web	www.web.nvd.nist.gov/view/vuln/detail

08 Dec 2022 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 35.9

CVSS 27.1

EPSS0.01339