This update for unbound fixes the following issues :

  - CVE-2020-12662: Fixed an issue where unbound could have     been tricked into amplifying an incoming query into a     large number of queries directed to a target     (bsc#1171889).

  - CVE-2020-12663: Fixed an issue where malformed answers     from upstream name servers could have been used to make     unbound unresponsive (bsc#1171889).&#9; 

  - CVE-2019-18934: Fixed a vulnerability in the IPSec     module which could have allowed code execution after     receiving a special crafted answer (bsc#1157268).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code     execution after receiving a specially crafted answer. This issue can only be triggered if unbound was     compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
    (CVE-2019-18934)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the unbound package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
138719	openSUSE Security Update : unbound (openSUSE-2020-913)	Nessus	SuSE Local Security Checks	2020/7/20	2024/2/29	high
222836	Linux Distros Unpatched Vulnerability : CVE-2019-18934	Nessus	Misc.	2025/3/4	2026/7/24	high
333040	Photon OS 5.0: Unbound PHSA-2026-5.0-92-0943	Nessus	PhotonOS Local Security Checks	2026/8/6	2026/8/12	high

检测

插件搜索

high

high

high