deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-21213
Published: 2021-04-26
Description: Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html; https://crbug.com/1161806; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21214
Published: 2021-04-26
Description: Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html; https://crbug.com/1170148; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21215
Published: 2021-04-26
Description: Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html; https://crbug.com/1172533; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21216
Published: 2021-04-26
Description: Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html; https://crbug.com/1173297; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21217
Published: 2021-04-26
Description: Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html; https://crbug.com/1166462; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21218
Published: 2021-04-26
Description: Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html; https://crbug.com/1166478; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21219
Published: 2021-04-26
Description: Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html; https://crbug.com/1166972; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21220
Published: 2021-04-26
Description: Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/162437/Google-Chrome-XOR-Typer-Out-Of-Bounds-Access-Remote-Code-Execution.html; http://packetstormsecurity.com/files/176210/Chrome-V8-JIT-XOR-Arbitrary-Code-Execution.html; https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html
CVE: CVE-2021-21221
Published: 2021-04-26
Description: Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html; https://crbug.com/1195333; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21222
Published: 2021-04-26
Description: Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html; https://crbug.com/1194046; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21223
Published: 2021-04-26
Description: Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-190
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html; https://crbug.com/1195308; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21224
Published: 2021-04-26
Description: Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html; https://crbug.com/1195777; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21225
Published: 2021-04-26
Description: Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html; https://crbug.com/1195977; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-21226
Published: 2021-04-26
Description: Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html; https://crbug.com/1197904; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/
CVE: CVE-2021-29672
Published: 2021-04-26
Description: IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash. IBM X-Force ID: 199479
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199479; https://security.gentoo.org/glsa/202209-02; https://www.ibm.com/support/pages/node/6445497
CVE: CVE-2021-29694
Published: 2021-04-26
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 200258.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200258; https://www.ibm.com/support/pages/node/6445735; https://exchange.xforce.ibmcloud.com/vulnerabilities/200258
CVE: CVE-2020-36325
Published: 2021-04-26
Description: An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/akheron/jansson/issues/548; https://github.com/akheron/jansson/issues/548
CVE: CVE-2021-22669
Published: 2021-04-26
Description: Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-103-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-103-02
CVE: CVE-2021-29473
Published: 2021-04-26
Description: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
CVSS Score: 2.5 (LOW)
CWE: CWE-125
References: https://github.com/Exiv2/exiv2/security/advisories/GHSA-7569-phvm-vwc2; https://github.com/Exiv2/exiv2/security/policy; https://github.com/github/advisory-review/pull/1587
CVE: CVE-2021-29475
Published: 2021-04-26
Description: HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when exporting a note to PDF. Since the code injection has to take place as note content, there fore this exploit requires the attackers ability to modify a note. This will affect all instances, which have pdf export enabled. This issue has been fixed by https://github.com/hedgedoc/hedgedoc/commit/c[PII_REDACTED]a6d668d616464cb2da5e90e123f65 and is available in version 1.5.0. Starting the CodiMD/HedgeDoc instance with `CMD_ALLOW_PDF_EXPORT=false` or set `"allowPDFExport": false` in config.json can mitigate this issue for those who cannot upgrade. This exploit works because while PhantomJS doesn't actually render the `file:///` references to the PDF file itself, it still uses them internally, and exfiltration is possible, and easy through JavaScript rendering. The impact is pretty bad, as the attacker is able to read the CodiMD/HedgeDoc `config.json` file as well any other files on the filesystem. Even though the suggested Docker deploy option doesn't have many interesting files itself, the `config.json` still often contains sensitive information, database credentials, and maybe OAuth secrets among other things.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94, CWE-918, CWE-94, CWE-918
References: https://github.com/hedgedoc/hedgedoc/commit/c[PII_REDACTED]a6d668d616464cb2da5e90e123f65; https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-pxxg-px9v-6qf3; https://github.com/hedgedoc/hedgedoc/commit/c[PII_REDACTED]a6d668d616464cb2da5e90e123f65
CVE: CVE-2021-31646
Published: 2021-04-26
Description: Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote). The affected component is the file forgot_pwd.php - it uses a weak algorithm for the generation of password recovery tokens (the PHP uniqueid function), allowing a brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://dojo.maltem.ca/public/advisories/CVE-2021-31646.html; https://gestsup.fr/index.php?page=download; https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.10&type=patch
CVE: CVE-2021-31783
Published: 2021-04-26
Description: show_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://github.com/Piwigo/LocalFilesEditor/commit/dda691d3e45bfd166ac175c70bd8b91cb4917b6b; https://github.com/Piwigo/LocalFilesEditor/issues/2; https://piwigo.org/ext/index.php?cid=null
CVE: CVE-2021-31784
Published: 2021-04-26
Description: An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf; https://www.opendesign.com/security-advisories; https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE: CVE-2021-29474
Published: 2021-04-26
Description: HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path traversal. To verify if you are affected, you can try to open the following URL: `http://localhost:3000/..%2F..%2FREADME#` (replace `http://localhost:3000` with your instance's base-URL e.g. `https://demo.hedgedoc.org/..%2F..%2FREADME#`). If you see a README page being rendered, you run an affected version. The attack works due the fact that the internal router passes the url-encoded alias to the `noteController.showNote`-function. This function passes the input directly to findNote() utility function, that will pass it on the the parseNoteId()-function, that tries to make sense out of the noteId/alias and check if a note already exists and if so, if a corresponding file on disk was updated. If no note exists the note creation-function is called, which pass this unvalidated alias, with a `.md` appended, into a path.join()-function which is read from the filesystem in the follow up routine and provides the pre-filled content of the new note. This allows an attacker to not only read arbitrary `.md` files from the filesystem, but also observes changes to them. The usefulness of this attack can be considered limited, since mainly markdown files are use the file-ending `.md` and all markdown files contained in the hedgedoc project, like the README, are public anyway. If other protections such as a chroot or container or proper file permissions are in place, this attack's usefulness is rather limited. On a reverse-proxy level one can force a URL-decode, which will prevent this attack because the router will not accept such a path.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20, CWE-22, CWE-22
References: https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-p528-555r-pf87; https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-p528-555r-pf87
CVE: CVE-2021-30165
Published: 2021-04-27
Description: The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain the privileged permission and further control the devices.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://www.twcert.org.tw/tw/cp-132-4670-359c8-1.html; https://www.twcert.org.tw/tw/cp-132-4670-359c8-1.html
CVE: CVE-2021-30635
Published: 2021-04-27
Description: Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no customer-specific data is exposed).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]61; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]61
CVE: CVE-2021-31671
Published: 2021-04-27
Description: pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://github.com/ankane/pgsync/issues/121; https://github.com/ankane/pgsync/issues/121
CVE: CVE-2021-31826
Published: 2021-04-27
Description: Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugs.debian.org/987608; https://git.shibboleth.net/view/?p=cpp-sp.git%3Ba=commit%3Bh=5a47c3b9378f4c49392dd4d15189b70956f9f2ec; https://issues.shibboleth.net/jira/browse/SSPCPP-927
CVE: CVE-2019-25031
Published: 2021-04-27
Description: Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-74
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25032
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25033
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25034
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25035
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25036
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25037
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25038
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25039
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25040
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25041
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/