PT-2019-6122 · Nlnet+8 · Unbound+8
CVE-2019-25042
·
Publicado
2019-12-11
·
Atualizado
2024-08-05
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Unbound versions prior to 1.9.5
Description
The issue is related to an out-of-bounds write via a compressed name in the
rdata copy function. Although the vendor disputes that this is a vulnerability, the code may be vulnerable. However, a running Unbound installation cannot be remotely or locally exploited. The vulnerability may allow an attacker to access confidential data, disrupt its integrity, and cause a denial of service.Recommendations
For Unbound versions prior to 1.9.5, update to version 1.9.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the
rdata copy function until a patch is available.Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Centos
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
Unbound