The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1683 advisory.

    2024-01-19: CVE-2019-25033 was added to this advisory.

    A flaw was found in unbound. An integer overflow in regional_alloc function may lead to a buffer overflow     of the allocated buffer if the size can be controlled by an attacker and can be big enough. The highest     threat from this vulnerability is to data confidentiality and integrity as well as service availability.
    (CVE-2019-25032)

    Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE:
    The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound     installation cannot be remotely or locally exploited. (CVE-2019-25033)

    A flaw was found in unbound. An integer overflow in the sldns_str2wire_dname_buf_origin function may lead     to a buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity     as well as service availability. (CVE-2019-25034)

    A flaw was found in unbound. An out-of-bounds write in the sldns_bget_token_par function may be abused by     a remote attacker. The highest threat from this vulnerability is to data confidentiality and integrity as     well as service availability. (CVE-2019-25035)

    A flaw was found in unbound. A reachable assertion in the synth_cname function can be triggered by sending     invalid packets to the server. If asserts are disabled during compilation, this issue might lead to an     out-of-bounds write in dname_pkt_copy function. The highest threat from this vulnerability is to data     confidentiality and integrity as well as service availability. (CVE-2019-25036)

    A flaw was found in unbound. A reachable assertion in the dname_pkt_copy function can be triggered by     sending invalid packets to the server. The highest threat from this vulnerability is to service     availability. (CVE-2019-25037)

    A flaw was found in unbound. An integer overflow in dnsc_load_local_data function may lead to a buffer     overflow of the allocated buffer if the size can be controlled by an attacker. The highest threat from     this vulnerability is to data confidentiality and integrity as well as service availability.
    (CVE-2019-25038)

    A flaw was found in unbound. An integer overflow in ub_packed_rrset_key function may lead to a buffer     overflow of the allocated buffer if the size can be controlled by an attacker. The highest threat from     this vulnerability is to data confidentiality and integrity as well as service availability.
    (CVE-2019-25039)

    A flaw was found in unbound. An infinite loop in dname_pkt_copy function could be triggered by a remote     attacker. The highest threat from this vulnerability is to service availability. (CVE-2019-25040)

    A flaw was found in unbound. A reachable assertion in the dname_pkt_copy function can be triggered through     compressed names. The highest threat from this vulnerability is to service availability. (CVE-2019-25041)

    A flaw was found in unbound. An out-of-bounds write in the rdata_copy function may be abused by a remote     attacker. The highest threat from this vulnerability is to data confidentiality and integrity as well as     service availability. (CVE-2019-25042)

    A symbolic link traversal vulnerability was found in unbound in the way it writes its PID file while     starting up. This flaw allows a local attacker with access to the unbound user to set up a link to another     file, owned by root, and make unbound overwrite it during its next restart, destroying the original     content. The highest threat from this vulnerability is integrity. (CVE-2020-28935)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : unbound (ALAS-2021-1683)

critical Nessus Plugin ID 151275

Version 1.4

Version 1.3

Version 1.2

Version 1.4 Dec 12, 2024, 9:55 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202412120955
Version 1.3 Jan 23, 2024, 6:48 AM CVE (set "CVE" coverage to "CVE-2019-25032,CVE-2019-25033,CVE-2019-25034,CVE-2019-25035,CVE-2019-25036,CVE-2019-25037,CVE-2019-25038,CVE-2019-25039,CVE-2019-25040,CVE-2019-25041,CVE-2019-25042,CVE-2020-28935") Detection (updated detection logic) Plugin metadata Plugin Feed: 202401230648
Version 1.2 Jan 23, 2024, 4:49 AM CVE (set "CVE" coverage to "CVE-2019-25032,CVE-2019-25033,CVE-2019-25034,CVE-2019-25035,CVE-2019-25036,CVE-2019-25037,CVE-2019-25038,CVE-2019-25039,CVE-2019-25040,CVE-2019-25041,CVE-2019-25042,CVE-2020-28935") Detection (updated detection logic) Plugin metadata Plugin Feed: 202401230449