Shell Code Execution Vulnerability in Unbound IPSEC Module by NLnet Labs
CVE-2019-18934

7.3HIGH

Key Information:

Vendor

Nlnetlabs

Status
Unbound
Vendor
CVE Published:
19 November 2019

What is CVE-2019-18934?

Unbound versions 1.6.4 through 1.9.4 have a security vulnerability in the IPSEC module that allows unauthenticated attackers to execute shell code. This vulnerability manifests when the Unbound DNS resolver is compiled with the --enable-ipsecmod flag and is configured to enable the IPSEC module. Successful exploitation requires the attacker to send a specially crafted response to the Unbound server, which can lead to severe consequences, including unauthorized access and control over the affected system.

References

http://www.openwall.com/lists/oss-security/2019/11/19/1
mailing-listx_refsource_MLIST
https://www.nlnetlabs.nl/downloads/unbound/CVE-2019-18934...
x_refsource_MISC
https://github.com/NLnetLabs/unbound/blob/release-1.9.5/d...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.