Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-25036

Опубликовано: 27 апр. 2021
Источник: ubuntu
Приоритет: medium
CVSS2: 5
CVSS3: 7.5

Описание

Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

РелизСтатусПримечание
bionic

released

1.6.7-1ubuntu2.4
devel

not-affected

esm-infra-legacy/trusty

not-affected

disputed
esm-infra/bionic

released

1.6.7-1ubuntu2.4
esm-infra/focal

released

1.9.4-2ubuntu1.2
esm-infra/xenial

not-affected

disputed
focal

released

1.9.4-2ubuntu1.2
groovy

not-affected

1.11.0-1
hirsute

not-affected

impish

not-affected

Показывать по

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 9.8
redhat
около 6 лет назад

Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS3: 7.5
nvd
почти 5 лет назад

Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS3: 7.5
debian
почти 5 лет назад

Unbound before 1.9.5 allows an assertion failure and denial of service ...

CVSS3: 7.5
github
больше 3 лет назад

Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.

CVSS3: 7.5
fstec
около 6 лет назад

Уязвимость функции synth_cname() DNS-сервера Unbound, связанная с недостатком использования функции assert(), позволяющая нарушителю вызвать отказ в обслуживании

5 Medium

CVSS2

7.5 High

CVSS3