Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-25040

Опубликовано: 27 апр. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

РелизСтатусПримечание
bionic

released

1.6.7-1ubuntu2.4
devel

not-affected

esm-infra-legacy/trusty

not-affected

disputed
esm-infra/bionic

released

1.6.7-1ubuntu2.4
esm-infra/focal

released

1.9.4-2ubuntu1.2
esm-infra/xenial

not-affected

disputed
focal

released

1.9.4-2ubuntu1.2
groovy

not-affected

1.11.0-1
hirsute

not-affected

impish

not-affected

Показывать по

EPSS

Процентиль: 77%
0.01019
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
около 6 лет назад

Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS3: 7.5
nvd
почти 5 лет назад

Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS3: 7.5
debian
почти 5 лет назад

Unbound before 1.9.5 allows an infinite loop via a compressed name in ...

CVSS3: 7.5
github
больше 3 лет назад

Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy.

CVSS3: 7.5
fstec
около 6 лет назад

Уязвимость функции dname_pkt_copy DNS-сервера Unbound, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 77%
0.01019
Низкий

5 Medium

CVSS2

7.5 High

CVSS3