Описание
Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.6.7-1ubuntu2.4 |
| devel | not-affected | |
| esm-infra-legacy/trusty | not-affected | disputed |
| esm-infra/bionic | released | 1.6.7-1ubuntu2.4 |
| esm-infra/focal | released | 1.9.4-2ubuntu1.2 |
| esm-infra/xenial | not-affected | disputed |
| focal | released | 1.9.4-2ubuntu1.2 |
| groovy | not-affected | 1.11.0-1 |
| hirsute | not-affected | |
| impish | not-affected |
Показывать по
4.3 Medium
CVSS2
5.9 Medium
CVSS3
Связанные уязвимости
Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation
Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation
Unbound before 1.9.5 allows configuration injection in create_unbound_ ...
Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session.
Уязвимость компонента create_unbound_ad_servers.sh DNS-сервера Unbound, позволяющая нарушителю оказать воздействие на целостность данных
4.3 Medium
CVSS2
5.9 Medium
CVSS3