Test Kennung:	1.3.6.1.4.1.25623.1.0.143049
Kategorie:	Denial of Service
Titel:	Unbound DNS Resolver < 1.9.4 DoS Vulnerability
Zusammenfassung:	Unbound DNS Resolver is prone to a denial of service (DoS); vulnerability.
Beschreibung:	Summary: Unbound DNS Resolver is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Unbound accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule. Affected Software/OS: Unbound DNS Resolver versions 1.7.1 through 1.9.3. Solution: Update to version 1.9.4 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-16866 Bugtraq: 20191016 [SECURITY] [DSA 4544-1] unbound security update (Google Search) https://seclists.org/bugtraq/2019/Oct/23 Debian Security Information: DSA-4544 (Google Search) https://www.debian.org/security/2019/dsa-4544 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MLRHE7TQFAOV4MB2ELTOGESZYUL65NUJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E65NCWZZB2D75ZIYWPXKMVGSGNYW4JMC/ https://github.com/NLnetLabs/unbound/blob/release-1.9.4/doc/Changelog https://nlnetlabs.nl/downloads/unbound/CVE-2019-16866.txt https://usn.ubuntu.com/4149-1/
Copyright	Copyright (C) 2019 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.