PT-2019-6132 · Nlnet+8 · Unbound+8
Publicado
2019-12-11
·
Atualizado
2024-08-05
·
CVE-2019-25039
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Unbound versions prior to 1.9.5
Description
The issue is related to an integer overflow in a size calculation in respip/respip.c. Although the vendor disputes that this is a vulnerability, the code may be vulnerable. However, a running Unbound installation cannot be remotely or locally exploited. The vulnerability may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations
For Unbound versions prior to 1.9.5, update to version 1.9.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable function until a patch is available.
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Centos
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
Unbound