Known vulnerabilities in unbound (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
unbound (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:unbound_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
37
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.4.22-1ubuntu4.14.04.3+esm3
1.5.8-1ubuntu1.1+esm3
1.6.7-1ubuntu2.6+esm4
1.9.4-2ubuntu1.11+esm1
1.13.1-1ubuntu5.15
1.19.2-1ubuntu3.8
1.22.0-2ubuntu2.3
1.24.2-1ubuntu2.1
1.13.1-1ubuntu5.14
1.19.2-1ubuntu3.7
1.22.0-1ubuntu1.3
1.22.0-2ubuntu2.2
1.13.1-1ubuntu5.13
1.19.2-1ubuntu3.6
1.22.0-1ubuntu1.2
1.22.0-2ubuntu2.1
1.22.0-2ubuntu2
1.13.1-1ubuntu5.12
1.22.0-2
1.21.1-1
1.22.0-1
1.22.0-1ubuntu1
1.20.0-1ubuntu2.2
1.20.0-1ubuntu2
1.20.0-1
1.20.0-1ubuntu1
1.19.2-1ubuntu3.4
1.19.2-1ubuntu3
1.19.2-1ubuntu2
1.19.2-1
1.19.2-1ubuntu1
1.19.1-1ubuntu3
1.19.1-1ubuntu2
1.19.1-1
1.19.1-1ubuntu1
1.18.0-2ubuntu2
1.18.0-2ubuntu1
1.18.0-1
1.18.0-2
1.17.1-2
1.17.1-1
1.17.0-1build1
1.16.3-1
1.17.0-1
1.16.2-1build1
1.16.2-1
1.13.1-1.1
1.15.0-1
1.15.0-2
1.15.0-3
1.15.0-4
1.15.0-5
1.15.0-6
1.15.0-7
1.15.0-8
1.15.0-9
1.15.0-10
1.15.0-11
1.16.0-1
1.16.0-2
1.13.1-1ubuntu5.10
1.13.1-1ubuntu5.9
1.13.1-1ubuntu5.2
1.13.1-1ubuntu5
1.13.1-1ubuntu4
1.13.1-1ubuntu3
1.13.1-1ubuntu2
1.13.1-1ubuntu1
1.13.1-1
1.13.0-1
1.12.0-1build1
1.12.0-1
1.11.0-1
1.10.1-1build1
1.9.4-2ubuntu1.11
1.9.4-2ubuntu1.10
1.22.0-2ubuntu1
1.20.0-1ubuntu2.3
1.13.1-1ubuntu5.11
1.19.2-1ubuntu3.5
1.22.0-1ubuntu1.1
1.9.4-2ubuntu1.9
1.13.1-1ubuntu5.8
1.19.2-1ubuntu3.3
1.20.0-1ubuntu2.1
Ubuntu Pro
1.9.4-2ubuntu1.8
1.13.1-1ubuntu5.7
1.19.2-1ubuntu3.2
1.9.4-2ubuntu1.6
1.13.1-1ubuntu5.5
1.17.1-2ubuntu0.2
1.19.2-1ubuntu3.1
1.9.4-2ubuntu1.5
1.13.1-1ubuntu5.4
1.17.1-2ubuntu0.1
1.6.7-1ubuntu2.6
1.9.4-2ubuntu1.4
1.13.1-1ubuntu5.3
1.16.2-1ubuntu0.1
1.9.4-2ubuntu1.3
1.13.1-1ubuntu5.1
1.6.7-1ubuntu2.5
1.9.4-2ubuntu1.2
1.6.7-1ubuntu2.4
1.10.1-1
1.9.6-1
1.9.6-2
1.9.4-2ubuntu1.1
1.9.0-2ubuntu1.1
1.6.7-1ubuntu2.3
1.4.18
1.4.18-1~ubuntu12.04.1
1.4.16
1.10.0
1.10.0-1
1.9.4
1.9.0
1.6.7
1.5.8
1.4.22
1.9.4-2build1
1.9.4-2ubuntu1
1.9.0-2ubuntu3
1.9.3~rc1-1
1.9.3-1
1.9.4-1
1.9.4-2
1.9.0-2ubuntu2
1.9.0-2ubuntu1
1.9.0-2ubuntu0.1
1.9.0-2
1.9.0-1
1.8.0-1
1.8.1-1
1.7.3-1build2
1.7.3-1build1
1.7.3-1
1.7.2-1
1.7.1-1
1.6.7-1ubuntu2.2
1.6.7-1ubuntu2
1.6.7-1ubuntu2.1
1.6.7-1ubuntu1
1.6.7-1build1
1.6.6-1
1.6.7-1
1.6.5-1ubuntu0.2
1.6.5-1ubuntu0.1
1.6.5-1
1.5.8-1ubuntu1.1
1.5.0~rc1-1
1.4.22-1ubuntu4.14.04.3
1.6.4-1build2
1.6.4-1build1
1.6.4-1
1.6.0-3ubuntu3
1.6.0-3ubuntu2
1.6.0-3
1.6.0-3ubuntu1
1.6.0-1
1.6.0-2
1.6.0-2ubuntu1
1.4.22-2
1.5.1-1
1.5.2-1
1.5.3-1
1.5.6-1
1.5.7-1
1.5.7-1ubuntu1
1.5.7-1ubuntu2
1.5.7-2
1.5.8-1
1.5.8-1ubuntu1
1.5.9-1
1.5.9-2
1.5.9-3
1.5.10-1
1.5.10-2
1.5.10-3
1.5.10-3ubuntu1
1.4.22-1ubuntu6
1.4.22-1ubuntu5
1.4.22-1ubuntu5.1
1.4.22-1ubuntu4.14.10.1
1.4.22-1ubuntu4.14.04.2
1.0.0-1
1.0.0-2
1.0.0-3
1.0.1-1
1.0.1-2
1.0.2-1
1.0.2-1.1
1.0.2-1.2
1.2.1-1
1.2.1-2
1.3.0-1
1.3.2-1
1.3.3-1
1.3.4-1
1.4.0-1
1.4.1-1
1.4.1-2
1.4.2-1
1.4.3-1
1.4.4-1
1.4.5-1
1.4.6-1
1.4.8-1
1.4.8-2
1.4.9-1
1.4.9-2
1.4.10-1
1.4.11-1
1.4.12-1
1.4.13-1
1.4.13-2
1.4.14-1
1.4.14-2
1.4.16-1
1.4.16-2
1.4.17-1
1.4.17-2
1.4.18-1
1.4.19-1
1.4.20-1
1.4.21-1
1.4.22-1
1.4.22-1ubuntu1
1.4.22-1ubuntu2
1.4.22-1ubuntu3
1.4.22-1ubuntu4
1.4.22-1ubuntu4.14.04.1
Vulnerabilities (37)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131985 - Heap-based Buffer Overflow CVE-2026-32792 |
CWE-122 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 12 more |
||
| #VU131932 - Resource exhaustion CVE-2026-44390 |
CWE-400 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 16 more |
||
| #VU131931 - Insufficient Verification of Data Authenticity CVE-2026-42960 |
CWE-345 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 13 more |
||
| #VU131930 - Access of Uninitialized Pointer CVE-2026-42959 |
CWE-824 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 17 more |
||
| #VU131929 - Heap-based Buffer Overflow CVE-2026-42944 |
CWE-122 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 15 more |
||
| #VU131928 - Resource exhaustion CVE-2026-42923 |
CWE-400 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 12 more |
||
| #VU131927 - Improper control of a resource through its lifetime CVE-2026-42534 |
CWE-664 | Low | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 16 more |
||
| #VU131926 - Resource exhaustion CVE-2026-41292 |
CWE-400 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 17 more |
||
| #VU131925 - Improper control of a resource through its lifetime CVE-2026-40622 |
CWE-664 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 22 more |
||
| #VU131924 - Use After Free CVE-2026-33278 |
CWE-416 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 15 more |
||
| #VU131923 - Use After Free CVE-2026-44608 |
CWE-416 | Medium | 1.4.22-1ubuntu4.14.04.3+esm3, 1.5.8-1ubuntu1.1+esm3, 1.6.7-1ubuntu2.6+esm4, 1.9.4-2ubuntu1.11+esm1, 1.13.1-1ubuntu5.15, 1.19.2-1ubuntu3.8, 1.22.0-2ubuntu2.3, 1.24.2-1ubuntu2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 10 more |
||
| #VU117534 - Insufficient Verification of Data Authenticity CVE-2025-11411 |
CWE-345 | Medium | 1.13.1-1ubuntu5.13, 1.13.1-1ubuntu5.14, 1.19.2-1ubuntu3.6, 1.19.2-1ubuntu3.7, 1.22.0-1ubuntu1.2, 1.22.0-1ubuntu1.3, 1.22.0-2ubuntu2.1, 1.22.0-2ubuntu2.2 | 22.10.2025 |
SB20251022156 SB20251024118 SB20251024119 and 21 more |
||
| #VU113077 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2025-5994 |
CWE-349 | Medium | 1.13.1-1ubuntu5.11, 1.19.2-1ubuntu3.5, 1.22.0-1ubuntu1.1 | 21.07.2025 |
SB2025072109 SB2025072110 SB2025072330 and 35 more |
||
| #VU98049 - Resource exhaustion CVE-2024-8508 |
CWE-400 | Medium | Ubuntu Pro, 1.9.4-2ubuntu1.9, 1.13.1-1ubuntu5.8, 1.19.2-1ubuntu3.3, 1.20.0-1ubuntu2.1 | 05.10.2024 |
SB2024100509 SB2024100510 SB2024100511 and 27 more |
||
| #VU96490 - Heap-based Buffer Overflow CVE-2024-43168 |
CWE-122 | Low | Ubuntu Pro, 1.9.4-2ubuntu1.8, 1.13.1-1ubuntu5.7, 1.19.2-1ubuntu3.2 | 23.08.2024 |
SB20240823101 SB20240823109 SB2024071831 and 3 more |
||
| #VU96082 - NULL Pointer Dereference CVE-2024-43167 |
CWE-476 | Medium | Ubuntu Pro, 1.9.4-2ubuntu1.8, 1.13.1-1ubuntu5.7, 1.19.2-1ubuntu3.2 | 19.08.2024 |
SB2024081929 SB20240823109 SB2024090233 and 4 more |
||
| #VU89361 - Resource Management Errors CVE-2024-33655 |
CWE-399 | Medium | 1.9.4-2ubuntu1.6, 1.13.1-1ubuntu5.5, 1.17.1-2ubuntu0.2, 1.19.2-1ubuntu3.1 | 12.05.2024 |
SB2024051202 SB2024051203 SB2024051204 and 9 more |
||
| #VU86378 - Resource exhaustion CVE-2023-50868 |
CWE-400 | Medium | 1.9.4-2ubuntu1.5, 1.13.1-1ubuntu5.4, 1.17.1-2ubuntu0.1 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 143 more |
||
| #VU86377 - Resource exhaustion CVE-2023-50387 |
CWE-400 | Medium | 1.9.4-2ubuntu1.5, 1.13.1-1ubuntu5.4, 1.17.1-2ubuntu0.1 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 145 more |
||
| #VU69407 - Resource exhaustion CVE-2022-3204 |
CWE-400 | Medium | 1.6.7-1ubuntu2.6, 1.9.4-2ubuntu1.4, 1.13.1-1ubuntu5.3, 1.16.2-1ubuntu0.1 | 18.11.2022 |
SB2022111805 SB2022111806 SB2022111808 and 19 more |
Showing elements 1 - 20 out of 37