CVE:CVE-2019-18934
CNNVD:CNNVD-201911-1160
Unbound是一款支持验证递归和缓存的DNS解析器。IPSec是其中的一个互联网安全协议模块。
Unbound 1.6.4版本至1.9.4版本中的IPSec模块存在安全漏洞。攻击者可借助特制的答案利用该漏洞执行shell代码。
solution:Upgrade nlnetlabs unbound to a higher version than 1.9.4,and avoid the version [1.6.4,1.9.4]; Upgrade fedoraproject fedora to a higher version than 31,and avoid the version 31; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2