Known vulnerabilities in unbound-anchor

Vendor: OpenAnolis
Software: unbound-anchor
Software CPE: cpe:2.3:o:openanolis:unbound-anchor:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 20
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting unbound-anchor unbound-anchor is affected by 20 known vulnerabilities: 1 high, 18 medium, 1 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139234 - Improper input validation
CVE-2026-44690		 CWE-20 High
No
No
 1.17.1-14 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 7 more
#VU139231 - Use After Free
CVE-2026-50046		 CWE-416 Medium
No
No
 1.17.1-14 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 3 more
#VU139228 - Improper Handling of Exceptional Conditions
CVE-2026-50251		 CWE-755 Medium
No
No
 1.17.1-14 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 5 more
#VU139221 - Improper Initialization
CVE-2026-55990		 CWE-665 Medium
No
No
 1.17.1-14 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 5 more
#VU139219 - Heap-based Buffer Overflow
CVE-2026-56416		 CWE-122 Medium
No
No
 1.17.1-14 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 5 more
#VU131985 - Heap-based Buffer Overflow
CVE-2026-32792		 CWE-122 Medium
No
No
 1.17.1-11 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 12 more
#VU131931 - Insufficient Verification of Data Authenticity
CVE-2026-42960		 CWE-345 Medium
No
No
 1.17.1-11 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 13 more
#VU131930 - Access of Uninitialized Pointer
CVE-2026-42959		 CWE-824 Medium
No
No
 1.17.1-11 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 17 more
#VU131929 - Heap-based Buffer Overflow
CVE-2026-42944		 CWE-122 Medium
No
No
 1.17.1-11 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 15 more
#VU131928 - Resource exhaustion
CVE-2026-42923		 CWE-400 Medium
No
No
 1.17.1-11 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 12 more
#VU131924 - Use After Free
CVE-2026-33278		 CWE-416 Medium
No
No
 1.17.1-11 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 15 more
#VU131923 - Use After Free
CVE-2026-44608		 CWE-416 Medium
No
No
 1.17.1-11 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 10 more
#VU117534 - Insufficient Verification of Data Authenticity
CVE-2025-11411		 CWE-345 Medium
No
No
 1.17.1-9, 1.17.1-11 22.10.2025 SB20251022156
SB20251024118
SB20251024119
and 21 more
#VU113077 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-5994		 CWE-349 Medium
No
No
 1.17.1-8 21.07.2025 SB2025072109
SB2025072110
SB2025072330
and 35 more
#VU98049 - Resource exhaustion
CVE-2024-8508		 CWE-400 Medium
No
No
 1.17.1-4 05.10.2024 SB2024100509
SB2024100510
SB2024100511
and 27 more
#VU96490 - Heap-based Buffer Overflow
CVE-2024-43168		 CWE-122 Low
No
No
 1.17.1-5 23.08.2024 SB20240823101
SB20240823109
SB2024071831
and 3 more
#VU96082 - NULL Pointer Dereference
CVE-2024-43167		 CWE-476 Medium
No
No
 1.17.1-7 19.08.2024 SB2024081929
SB20240823109
SB2024090233
and 4 more
#VU89361 - Resource Management Errors
CVE-2024-33655		 CWE-399 Medium
No
No
 1.17.1-3 12.05.2024 SB2024051202
SB2024051203
SB2024051204
and 9 more
#VU86378 - Resource exhaustion
CVE-2023-50868		 CWE-400 Medium
Available
No
 1.17.1-6 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 143 more
#VU86377 - Resource exhaustion
CVE-2023-50387		 CWE-400 Medium
Available
No
 1.17.1-6 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 145 more