The vulnerability of the ALIGN_UP macro in the Unbound DNS server allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ALIGNUP macro in the Unbound DNS server is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

Unbound integer overflow vulnerability (CNVD-2021-32622)

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the zone allocator in versions of Unbound prior to 1.9.5. An attacker can cause an integer overflow by exploiting this vulnerability via the ALIGNUP macro...

CVE-2019-25033

CVE-2019-25033 : Unbound before 1.9.5 has an integer overflow in the regional allocator via the ALIGN_UP macro. The vendor disputes this as a vulnerability; a running Unbound installation cannot be remotely or locally exploited. Public docs reference this CVE across multiple advisories linked to ...

CVE-2019-25033

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGNUP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...