Unbound integer overflow vulnerability (CNVD-2021-32622)

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the zone allocator in versions of Unbound prior to 1.9.5. An attacker can cause an integer overflow by exploiting this vulnerability via the ALIGNUP macro...

CVE-2019-25033

CVE-2019-25033 : Unbound before 1.9.5 has an integer overflow in the regional allocator via the ALIGN_UP macro. The vendor disputes this as a vulnerability; a running Unbound installation cannot be remotely or locally exploited. Public docs reference this CVE across multiple advisories linked to ...

CVE-2019-25033

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGNUP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...