CVE-2019-25036

Unbound prior to 1.9.5 contains an assertion failure in synth_cname that can lead to denial of service. The vendor notes this may not be a vulnerability and that a running Unbound install cannot be remotely or locally exploited; nevertheless, multiple advisories report CVE-2019-25036 with DoS pot...

CVE-2019-25037

CVE-2019-25037 involves Unbound prior to 1.9.5, where an assertion failure in the dname_pkt_copy function can cause a denial of service when processing an invalid packet. The vendor disputes this as a vulnerability, and a running Unbound installation is described as not remotely or locally exploi...

CVE-2019-25037

Unbound before 1.9.5 allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25037

Unbound before 1.9.5 allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25037

Unbound before 1.9.5 allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25038

Unbound prior to 1.9.5 contains an integer overflow in a size calculation in dnscrypt/dnscrypt.c (CVE-2019-25038). The issue is described across multiple sources as potentially vulnerable code, but vendor disputes that it is exploitable in running installations. Affected versions are those before...

CVE-2019-25038

Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25038

Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25038

Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25039

CVE-2019-25039 affects Unbound before 1.9.5, with an integer overflow in size calculation in respip/respip.c. The vendor disputes this as a vulnerability, and the description notes that a running Unbound installation cannot be remotely or locally exploited. CVSS scores in the entry show: CVSS2 ba...

CVE-2019-25039

Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25039

Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25040

Unbound before 1.9.5 allows an infinite loop via a compressed name in dnamepktcopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25040

CVE-2019-25040 affects Unbound prior to 1.9.5 and describes an infinite loop in dname_pkt_copy triggered by compressed names. The linked sources (Astra Linux bulletin, Cloud Foundry USN, Debian/ALMA/Red Hat advisories) reiterate the same description and note the vendor disputes the vulnerability,...

CVE-2019-25040

Unbound before 1.9.5 allows an infinite loop via a compressed name in dnamepktcopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25041

Unbound (DNS resolver) prior to 1.9.5 contains an assertion failure in dname_pkt_copy when handling compressed names. The CVE entry notes the vendor disputes this as a vulnerability, and a running Unbound installation cannot be remotely or locally exploited according to the description. Connected...

CVE-2019-25041

Unbound before 1.9.5 allows an assertion failure via a compressed name in dnamepktcopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25041

Unbound before 1.9.5 allows an assertion failure via a compressed name in dnamepktcopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25042

Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdatacopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

CVE-2019-25042

Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdatacopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...