SUSE: Security Advisory (SUSE-SU-2020:1772-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-11172 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the HID magicmouse driver, where a sanity check for an Apple trackpad was added but returned success...

Oracle Linux 8 : unbound (ELSA-2021-1853)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1853 advisory. 1.7.3-15 - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key - Resolves: rhbz1714175 - Use system-wide crypto policy setting...

Photon OS 1.0: Unbound PHSA-2021-1.0-0390

An update of the unbound package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0390. The text itself is copyright C VMware, Inc...

unbound security, bug fix, and enhancement update

1.7.3-15 - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key - Resolves: rhbz1714175 - Use system-wide crypto policy setting PROFILE=SYSTEM instead of custom setting - Resolves: rhbz1842837 - Enable additional logging in unbound - Resolves: rhbz1850460 - security hardenin...

Arbitrary Code Execution

unbound is vulnerable to arbitrary code execution. An integer overflow in the regional allocator via the ALIGNUP macro allows an attacker to execute arbitrary code on the host OS...

Man-in-the-middle (MITM)

Unbound before 1.9.5 allows configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session...

Critical Photon OS Security Update - PHSA-2021-0390

Updates of 'cifs-utils', 'linux', 'unbound', 'mysql' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0390

An update of 'unbound', 'cifs-utils', 'mysql' packages of Photon OS has been released...

Photon OS 3.0: Unbound PHSA-2021-3.0-0236

An update of the unbound package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0236. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Denial Of Service (DoS)

unbound is vulnerable to denial of service DoS. The vulnerability exists through an assertion failure through a compressed name in dnamepktcopy...

Denial Of Service (DoS)

unboubnd is vulnerable to denial of service. According to the original report there are checks happening before the affected function that make this not exploitable. For these reasons its Impact is Moderate. Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdatacopy. A...

Arbitrary Code Execution

unbound is vulnerable to arbitrary code execution. The vulnerability exists through an integer overflow in a size calculation in respip/respip.c. A flaw was found in unbound. An integer overflow in ubpackedrrsetkey function may lead to a buffer overflow of the allocated buffer if the size can be...

Denial Of Service (DoS)

unbound is vulnerable to denial of service. There is no available reproducer or proof of concept for this issue, nor it was ever proven the infinite loop can be triggered in practice...

Denial Of Service (DoS)

unbound is vulnerable to denial of service. There is no available reproducer or proof of concept for this issue, nor it was ever proven the integer overflow can lead to a buffer overflow in practice...

Denial Of Service (DoS)

Unbound is vulnerable to denial of service. It allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered by sending invalid packets to the server...

Denial Of Service (DoS)

unbound is vulnerable to denial of service. The vulnerability exists due to an assertion failure. in synthcname. An attacker is able to crash the system by sending invalid packets to the server...

Denial Of Service (DoS)

unbound is vulnerable to denial of service. Unbound allows an out-of-bounds write in sldnsbgettokenpar...

Denial Of Service (DoS)

unbound is vulnerable to denial of service. There is no available reproducer or proof of concept for this issue, nor it was ever proven the buffer overflow can happen in practice. Indeed in the original report this issue was considered one that might not be triggered and for this reason its Impac...

Denial Of Service (DoS)

unbound is vulnerable to denial of service. The vulnerability exists due to an integer overflow in regionalalloc function may lead to a buffer overflow of the allocated buffer if the size can be controlled by an attacker and can be big enough...