Code injection

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with --enable-ipsecmod support, and ipsecmod is enabled and used in the configuration...

CVE-2019-18934

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with --enable-ipsecmod support, and ipsecmod is enabled and used in the configuration...

CVE-2019-18934

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with --enable-ipsecmod support, and ipsecmod is enabled and used in the configuration...

Unbound IPSEC Module CVE-2019-18934 Arbitrary Shell Command Injection Vulnerability

Description Unbound IPSEC Module is prone to a command-injection vulnerability. An attacker can exploit this issue to execute arbitrary shell commands on the affected system. Unbound versions 1.6.4 through 1.9.4 are vulnerable. Technologies Affected Unbound Unbound 1.6.10 Unbound Unbound 1.6.4...

CVE-2019-18934: Improper Neutralization of Special Elements used in an OS Command

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with --enable-ipsecmod support, and ipsecmod is enabled and used in the configuration...

CVE-2008-1205

Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is running, allows local users to cause a denial of service panic via unspecified vectors...

CVE-2007-6094: Improper Input Validation

The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service module crash via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy PFS...