Known vulnerabilities in unbound (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:unbound_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 19
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting unbound (Debian package) unbound (Debian package) is affected by 19 known vulnerabilities: 18 medium, 1 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131985 - Heap-based Buffer Overflow
CVE-2026-32792
CWE-122 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 11 more
#VU131932 - Resource exhaustion
CVE-2026-44390
CWE-400 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 15 more
#VU131931 - Insufficient Verification of Data Authenticity
CVE-2026-42960
CWE-345 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 12 more
#VU131930 - Access of Uninitialized Pointer
CVE-2026-42959
CWE-824 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 16 more
#VU131929 - Heap-based Buffer Overflow
CVE-2026-42944
CWE-122 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 14 more
#VU131928 - Resource exhaustion
CVE-2026-42923
CWE-400 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 11 more
#VU131927 - Improper control of a resource through its lifetime
CVE-2026-42534
CWE-664 Low
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 15 more
#VU131926 - Resource exhaustion
CVE-2026-41292
CWE-400 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 16 more
#VU131925 - Improper control of a resource through its lifetime
CVE-2026-40622
CWE-664 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 15 more
#VU131924 - Use After Free
CVE-2026-33278
CWE-416 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 14 more
#VU131923 - Use After Free
CVE-2026-44608
CWE-416 Medium
No
No
1.22.0-2+deb13u3 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 9 more
#VU117534 - Insufficient Verification of Data Authenticity
CVE-2025-11411
CWE-345 Medium
No
No
1.22.0-2+deb13u1 22.10.2025 SB20251022156
SB20251024118
SB20251024119
and 21 more
#VU113077 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-5994
CWE-349 Medium
No
No
1.17.1-2+deb12u3 21.07.2025 SB2025072109
SB2025072110
SB2025072330
and 35 more
#VU98049 - Resource exhaustion
CVE-2024-8508
CWE-400 Medium
No
No
1.17.1-2+deb12u3 05.10.2024 SB2024100509
SB2024100510
SB2024100511
and 27 more
#VU89361 - Resource Management Errors
CVE-2024-33655
CWE-399 Medium
No
No
1.17.1-2+deb12u3 12.05.2024 SB2024051202
SB2024051203
SB2024051204
and 9 more
#VU86378 - Resource exhaustion
CVE-2023-50868
CWE-400 Medium
Available
No
1.13.1-1+deb11u2, 1.17.1-2+deb12u2 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 143 more
#VU86377 - Resource exhaustion
CVE-2023-50387
CWE-400 Medium
Available
No
1.13.1-1+deb11u2, 1.17.1-2+deb12u2 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 145 more
#VU28163 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12663
CWE-835 Medium
No
No
1.9.0-2+deb10u2 21.05.2020 SB2020052127
SB2020052128
SB2020052711
and 15 more
#VU28161 - Improper input validation
CVE-2020-12662
CWE-20 Medium
No
No
1.9.0-2+deb10u2 21.05.2020 SB2020052127
SB2020052128
SB2020052711
and 15 more