Known vulnerabilities in unbound (Red Hat package)
Vendor:
Red Hat Inc.
Software:
unbound (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:unbound_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
33
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.24.2-7.el10_2.4
1.16.2-5.12.el8_10
1.24.2-3.el9_8.2
1.24.2-7.el10_2.2
1.24.2-3.el9_8.1
1.16.2-5.11.el8_10
1.24.2-7.el10_2.1
1.7.3-17.el8_6.6
1.7.3-12.el8_2.2
1.7.3-15.el8_4.2
1.16.2-5.el8_8.5
1.16.2-3.el9_2.5
1.13.1-13.el9_0.5
1.16.2-8.el9_4.2
1.20.0-12.el10_0
1.16.2-5.9.el8_10
1.16.2-19.el9_6.1
1.16.2-18.el9_6
1.20.0-10.el10_0
1.16.2-5.8.el8_10
1.16.2-8.el9_5.1
1.16.2-8.el9_4.1
1.6.6-5.el7_9.1
1.7.3-12.el8_2.1
1.7.3-15.el8_4.1
1.7.3-17.el8_6.5
1.7.3-17.el8_6.4
1.16.2-5.el8_8.4
1.13.1-13.el9_0.4
1.16.2-3.el9_2.4
1.16.2-5.el8_9.6
1.16.2-3.el9_3.5
1.16.2-5.el8_9.2
1.16.2-5.el8_8.1
1.16.2-3.el9_2.1
1.16.2-3.el9_3.1
1.7.3-17.el8_6.1
1.16.2-5.el8
1.16.2-3.el9
1.7.3-10.el8
1.16.2-2.el9
1.16.2-2.el8
1.7.3-12.el8_2
1.7.3-15.el8
1.6.6-2.el7_7
1.6.6-5.el7_8
1.4.20-29.el6_10.1
1.7.3-9.el8_1
1.6.6-4.el7_8
1.7.3-11.el8_2
1.7.3-9.el8_0
1.4.20-26.el7
1.4.20-26.el6_10
1.4.20-23.el6_9
1.4.20-23.el6
Vulnerabilities (33)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139234 - Improper input validation CVE-2026-44690 |
CWE-20 | High | 1.24.2-7.el10_2.4 | 23.07.2026 |
SB2026072350 SB20260727391 SB2026081218 and 7 more |
||
| #VU139222 - Stack-based buffer overflow CVE-2026-55973 |
CWE-121 | Medium | 1.24.2-7.el10_2.4 | 23.07.2026 |
SB2026072350 SB20260727391 SB20260817114 and 1 more |
||
| #VU131932 - Resource exhaustion CVE-2026-44390 |
CWE-400 | Medium | 1.16.2-5.12.el8_10, 1.24.2-3.el9_8.2, 1.24.2-7.el10_2.2 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 16 more |
||
| #VU131930 - Access of Uninitialized Pointer CVE-2026-42959 |
CWE-824 | Medium | 1.16.2-5.11.el8_10, 1.24.2-3.el9_8.1, 1.24.2-7.el10_2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 17 more |
||
| #VU131929 - Heap-based Buffer Overflow CVE-2026-42944 |
CWE-122 | Medium | 1.16.2-5.11.el8_10, 1.24.2-3.el9_8.1, 1.24.2-7.el10_2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 15 more |
||
| #VU131927 - Improper control of a resource through its lifetime CVE-2026-42534 |
CWE-664 | Low | 1.16.2-5.12.el8_10, 1.24.2-3.el9_8.2, 1.24.2-7.el10_2.2 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 16 more |
||
| #VU131926 - Resource exhaustion CVE-2026-41292 |
CWE-400 | Medium | 1.16.2-5.12.el8_10, 1.24.2-3.el9_8.2, 1.24.2-7.el10_2.2 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 17 more |
||
| #VU131925 - Improper control of a resource through its lifetime CVE-2026-40622 |
CWE-664 | Medium | 1.16.2-5.12.el8_10, 1.24.2-3.el9_8.2, 1.24.2-7.el10_2.2 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 21 more |
||
| #VU131924 - Use After Free CVE-2026-33278 |
CWE-416 | Medium | 1.24.2-3.el9_8.1, 1.24.2-7.el10_2.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 15 more |
||
| #VU113077 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2025-5994 |
CWE-349 | Medium | 1.7.3-12.el8_2.2, 1.7.3-15.el8_4.2, 1.7.3-17.el8_6.6, 1.13.1-13.el9_0.5, 1.16.2-3.el9_2.5, 1.16.2-5.el8_8.5, 1.16.2-5.9.el8_10, 1.16.2-8.el9_4.2, 1.16.2-19.el9_6.1, 1.20.0-12.el10_0 | 21.07.2025 |
SB2025072109 SB2025072110 SB2025072330 and 35 more |
||
| #VU98049 - Resource exhaustion CVE-2024-8508 |
CWE-400 | Medium | 1.16.2-5.8.el8_10, 1.16.2-8.el9_4.1, 1.16.2-8.el9_5.1, 1.16.2-18.el9_6, 1.20.0-10.el10_0 | 05.10.2024 |
SB2024100509 SB2024100510 SB2024100511 and 27 more |
||
| #VU87749 - Missing Authorization CVE-2024-1488 |
CWE-862 | Low | 1.7.3-12.el8_2.1, 1.7.3-15.el8_4.1, 1.7.3-17.el8_6.4, 1.13.1-13.el9_0.4, 1.16.2-3.el9_2.4, 1.16.2-3.el9_3.5, 1.16.2-5.el8_8.4, 1.16.2-5.el8_9.6, 1.16.2-5.8.el8_10 | 22.03.2024 |
SB2024021506 SB2024032281 SB2024041058 and 28 more |
||
| #VU86378 - Resource exhaustion CVE-2023-50868 |
CWE-400 | Medium | 1.6.6-5.el7_9.1, 1.7.3-12.el8_2.1, 1.7.3-15.el8_4.1, 1.7.3-17.el8_6.4, 1.13.1-13.el9_0.4, 1.16.2-3.el9_2.1, 1.16.2-3.el9_3.1, 1.16.2-5.el8_8.1, 1.16.2-5.el8_9.2 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 143 more |
||
| #VU86377 - Resource exhaustion CVE-2023-50387 |
CWE-400 | Medium | 1.6.6-5.el7_9.1, 1.7.3-12.el8_2.1, 1.7.3-15.el8_4.1, 1.7.3-17.el8_6.4, 1.13.1-13.el9_0.4, 1.16.2-3.el9_2.1, 1.16.2-3.el9_3.1, 1.16.2-5.el8_8.1, 1.16.2-5.el8_9.2 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 145 more |
||
| #VU69407 - Resource exhaustion CVE-2022-3204 |
CWE-400 | Medium | 1.7.3-17.el8_6.5, 1.16.2-3.el9, 1.16.2-5.el8 | 18.11.2022 |
SB2022111805 SB2022111806 SB2022111808 and 19 more |
||
| #VU66548 - Predictable from Observable State CVE-2022-30698 |
CWE-341 | Medium | 1.7.3-17.el8_6.5, 1.16.2-2.el8, 1.16.2-2.el9 | 16.08.2022 |
SB2022081641 SB2022081644 SB2022081703 and 21 more |
||
| #VU66547 - Predictable from Observable State CVE-2022-30699 |
CWE-341 | Medium | 1.7.3-17.el8_6.5, 1.16.2-2.el8, 1.16.2-2.el9 | 16.08.2022 |
SB2022081641 SB2022081644 SB2022081703 and 21 more |
||
| #VU53034 - Integer overflow CVE-2019-25033 |
CWE-190 | High | 1.7.3-17.el8_6.1 | 10.05.2021 |
SB2021051029 SB2021051030 SB2021050638 and 7 more |
||
| #VU53033 - Integer overflow CVE-2019-25034 |
CWE-190 | High | 1.7.3-12.el8_2, 1.7.3-15.el8 | 10.05.2021 |
SB2021051029 SB2021051030 SB2021052210 and 7 more |
||
| #VU48897 - Improper Link Resolution Before File Access ('Link Following') CVE-2020-28935 |
CWE-59 | Low | 1.7.3-12.el8_2, 1.7.3-15.el8 | 07.12.2020 |
SB2020120725 SB2020120223 SB2020120908 and 13 more |
Showing elements 1 - 20 out of 33