Integer Overflow Vulnerability in Unbound DNS by NLnet Labs

CVE-2019-25039

What is CVE-2019-25039?

Unbound, a widely adopted DNS resolver developed by NLnet Labs, has been identified as having an integer overflow issue in the size calculation within the respip/respip.c module. This vulnerability could theoretically impact the performance of the software. However, it is essential to note that the vendor contests the classification of this as a vulnerability. Affected installations of Unbound, particularly before version 1.9.5, cannot be exploited either remotely or locally in a way that compromises security, thus leaving users with a mitigated risk profile.

References