FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-27 18:04:16 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
a2cb7c31-9c79-11ea-a9c2-d05099c0ae8cunbound -- mutliple vulnerabilities

NLNetLabs reports:

This release fixes CVE-2020-12662 and CVE-2020-12663.

Bug Fixes:

  • CVE-2020-12662 Unbound can be tricked into amplifying an incoming query into a large number of queries directed to a target.
  • CVE-2020-12663 Malformed answers from upstream name servers can be used to make Unbound unresponsive.

Discovery 2020-05-19
Entry 2020-05-22
Modified 2020-07-10
unbound
< 1.10.1

FreeBSD
ge 12.1 lt 12.1_7

ge 11.4 lt 11.4_1

ge 11.3 lt 11.3_11

SA-20:19.unbound
https://lists.nlnetlabs.nl/pipermail/unbound-users/2020-May/006833.html
CVE-2020-12662
CVE-2020-12663
8d3bae09-fd28-11e7-95f2-005056925db4unbound -- vulnerability in the processing of wildcard synthesized NSEC records

Unbound reports:

We discovered a vulnerability in the processing of wildcard synthesized NSEC records. While synthesis of NSEC records is allowed by RFC4592, these synthesized owner names should not be used in the NSEC processing. This does, however, happen in Unbound 1.6.7 and earlier versions.


Discovery 2017-10-08
Entry 2018-01-19
unbound
< 1.6.8

https://unbound.net/downloads/CVE-2017-15105.txt
CVE-2017-15105
ports/225313
ffc80e58-0dcb-11ea-9673-4c72b94353b5unbound -- parsing vulnerability

Unbound Security Advisories:

Recent versions of Unbound contain a vulnerability that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with --enable-ipsecmod support, and ipsecmod is enabled and used in the configuration.


Discovery 2019-11-19
Entry 2019-11-23
unbound
< 1.9.5

https://nlnetlabs.nl/projects/unbound/security-advisories/#vulnerability-in-ipsec-module
CVE-2019-18934
bc43a578-14ec-11ed-856e-d4c9ef517024Unbound -- Multiple vulnerabilities

NLnet Labs reports:

novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue nameserver delays the response so that the cached delegation information is expired. Upon receiving the delayed answer containing the delegation information, Unbound overwrites the now expired entries. This action can be repeated when the delegation information is about to expire making the rogue delegation information ever-updating.

novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation information by querying Unbound for a second level subdomain which the rogue nameserver provides new delegation information.


Discovery 2022-08-01
Entry 2022-08-05
unbound
< 1.16.2

CVE-2022-30699
CVE-2022-30698
https://www.nlnetlabs.nl/projects/unbound/security-advisories/
5a1c2e06-3fb7-11ed-a402-b42e991fc52eunbound -- Non-Responsive Delegation Attack

A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for a record that relies on those unresponsive nameservers. The attack can cause a resolver to spend a lot of time/resources resolving records under a malicious delegation point where a considerable number of unresponsive NS records reside. It can trigger high CPU usage in some resolver implementations that continually look in the cache for resolved NS records in that delegation.

.


Discovery 2022-09-26
Entry 2022-09-29
unbound
< 1.16.2

CVE-2022-3204
https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
388ebb5b-3c95-11eb-929d-d4c9ef517024Unbound/NSD -- Denial of service vulnerability

NLNetLabs reports:

Unbound and NSD when writing the PID file would not check if an existing file was a symlink. This could allow for a local symlink \ attack if an attacker has access to the user Unbound/NSD runs as.


Discovery 2020-12-01
Entry 2020-12-12
unbound
< 1.13.0

nsd
< 4.3.4

https://nlnetlabs.nl/downloads/unbound/CVE-2020-28935.txt
CVE-2020-28935