Known vulnerabilities in unbound
Vendor:
SUSE
Software:
unbound
Software CPE:
cpe:2.3:o:suse:unbound:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
19
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (19)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131985 - Heap-based Buffer Overflow CVE-2026-32792 |
CWE-122 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 12 more |
||
| #VU131932 - Resource exhaustion CVE-2026-44390 |
CWE-400 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 16 more |
||
| #VU131931 - Insufficient Verification of Data Authenticity CVE-2026-42960 |
CWE-345 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 13 more |
||
| #VU131930 - Access of Uninitialized Pointer CVE-2026-42959 |
CWE-824 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 17 more |
||
| #VU131929 - Heap-based Buffer Overflow CVE-2026-42944 |
CWE-122 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 15 more |
||
| #VU131928 - Resource exhaustion CVE-2026-42923 |
CWE-400 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 12 more |
||
| #VU131927 - Improper control of a resource through its lifetime CVE-2026-42534 |
CWE-664 | Low | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 16 more |
||
| #VU131926 - Resource exhaustion CVE-2026-41292 |
CWE-400 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 17 more |
||
| #VU131925 - Improper control of a resource through its lifetime CVE-2026-40622 |
CWE-664 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 21 more |
||
| #VU131924 - Use After Free CVE-2026-33278 |
CWE-416 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 15 more |
||
| #VU131923 - Use After Free CVE-2026-44608 |
CWE-416 | Medium | 1.20.0-150600.23.16.1 | 20.05.2026 |
SB2026052056 SB2026052088 SB2026052089 and 10 more |
||
| #VU117534 - Insufficient Verification of Data Authenticity CVE-2025-11411 |
CWE-345 | Medium | 1.20.0-150600.23.13.1, 1.24.1-160000.1.1 | 22.10.2025 |
SB20251022156 SB20251024118 SB20251024119 and 21 more |
||
| #VU98049 - Resource exhaustion CVE-2024-8508 |
CWE-400 | Medium | 1.20.0-150100.10.19.1, 1.20.0-150600.23.9.1 | 05.10.2024 |
SB2024100509 SB2024100510 SB2024100511 and 27 more |
||
| #VU96082 - NULL Pointer Dereference CVE-2024-43167 |
CWE-476 | Medium | 1.20.0-150100.10.16.1, 1.20.0-150600.23.6.1 | 19.08.2024 |
SB2024081929 SB20240823109 SB2024090233 and 4 more |
||
| #VU86378 - Resource exhaustion CVE-2023-50868 |
CWE-400 | Medium | 1.20.0-150100.10.13.1, 1.20.0-150600.23.3.1 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 143 more |
||
| #VU86377 - Resource exhaustion CVE-2023-50387 |
CWE-400 | Medium | 1.20.0-150100.10.13.1, 1.20.0-150600.23.3.1 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 145 more |
||
| #VU69407 - Resource exhaustion CVE-2022-3204 |
CWE-400 | Medium | 1.20.0-150100.10.13.1, 1.20.0-150600.23.3.1 | 18.11.2022 |
SB2022111805 SB2022111806 SB2022111808 and 19 more |
||
| #VU66548 - Predictable from Observable State CVE-2022-30698 |
CWE-341 | Medium | 1.20.0-150100.10.13.1, 1.20.0-150600.23.3.1 | 16.08.2022 |
SB2022081641 SB2022081644 SB2022081703 and 21 more |
||
| #VU66547 - Predictable from Observable State CVE-2022-30699 |
CWE-341 | Medium | 1.20.0-150100.10.13.1, 1.20.0-150600.23.3.1 | 16.08.2022 |
SB2022081641 SB2022081644 SB2022081703 and 21 more |