Known vulnerabilities in Unbound 1.4.11rc3

Vendor: NLnet Labs
Software: Unbound
Version: 1.4.11rc3
Software CPE: cpe:2.3:a:unbound_net:unbound:*:*:*:*:*:*:*:*
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Unbound version 1.4.11rc3 Unbound 1.4.11rc3 is affected by 28 vulnerabilities: 7 high, 19 medium, 2 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139236 - Improper Access Control
CVE-2026-44621
CWE-284 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081455
and 4 more
#VU139228 - Improper Handling of Exceptional Conditions
CVE-2026-50251
CWE-755 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 5 more
#VU139219 - Heap-based Buffer Overflow
CVE-2026-56416
CWE-122 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 5 more
#VU117534 - Insufficient Verification of Data Authenticity
CVE-2025-11411
CWE-345 Medium
No
No
1.24.1 22.10.2025 SB20251022156
SB20251024118
SB20251024119
and 21 more
#VU98049 - Resource exhaustion
CVE-2024-8508
CWE-400 Medium
No
No
1.21.1 05.10.2024 SB2024100509
SB2024100510
SB2024100511
and 27 more
#VU96490 - Heap-based Buffer Overflow
CVE-2024-43168
CWE-122 Low
No
No
1.20.0 23.08.2024 SB20240823101
SB20240823109
SB2024071831
and 3 more
#VU96082 - NULL Pointer Dereference
CVE-2024-43167
CWE-476 Medium
No
No
1.21.0 19.08.2024 SB2024081929
SB20240823109
SB2024090233
and 4 more
#VU89361 - Resource Management Errors
CVE-2024-33655
CWE-399 Medium
No
No
1.20.0 12.05.2024 SB2024051202
SB2024051203
SB2024051204
and 9 more
#VU86378 - Resource exhaustion
CVE-2023-50868
CWE-400 Medium
Public exploit available
No
1.19.1 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 143 more
#VU86377 - Resource exhaustion
CVE-2023-50387
CWE-400 Medium
Public exploit available
No
1.19.1 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 145 more
#VU69407 - Resource exhaustion
CVE-2022-3204
CWE-400 Medium
No
No
1.16.3 18.11.2022 SB2022111805
SB2022111806
SB2022111808
and 19 more
#VU66548 - Predictable from Observable State
CVE-2022-30698
CWE-341 Medium
No
No
1.16.2 16.08.2022 SB2022081641
SB2022081644
SB2022081703
and 21 more
#VU66547 - Predictable from Observable State
CVE-2022-30699
CWE-341 Medium
No
No
1.16.2 16.08.2022 SB2022081641
SB2022081644
SB2022081703
and 21 more
#VU53033 - Integer overflow
CVE-2019-25034
CWE-190 High
No
No
1.9.5 10.05.2021 SB2021051029
SB2021051030
SB2021052210
and 7 more
#VU53028 - Out-of-bounds write
CVE-2019-25042
CWE-787 High
No
No
1.9.5 10.05.2021 SB2021051029
SB2021051030
SB2021052210
and 7 more
#VU53027 - Integer overflow
CVE-2019-25039
CWE-190 High
No
No
1.9.5 10.05.2021 SB2021051029
SB2021051030
SB2021052210
and 7 more
#VU53026 - Integer overflow
CVE-2019-25038
CWE-190 High
No
No
1.9.5 10.05.2021 SB2021051029
SB2021051030
SB2021052210
and 7 more
#VU53025 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-25040
CWE-835 Medium
No
No
1.9.5 10.05.2021 SB2021051029
SB2021051030
SB2021052210
and 7 more
#VU53024 - Out-of-bounds write
CVE-2019-25035
CWE-787 High
No
No
1.9.5 10.05.2021 SB2021051029
SB2021051030
SB2021052210
and 7 more
#VU53023 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-25031
CWE-74 Medium
No
No
1.9.5 10.05.2021 SB2021051029
SB2021051030
SB2021050638
and 3 more


Showing elements 1 - 20 out of 28