CVE:CVE-2019-25031
CNNVD:CNNVD-202104-2027
Unbound是荷兰NLnet Labs（Nlnet Labs）基金会的一款支持验证递归和缓存的DNS解析器。
Unbound 1.9.5之前版本存在安全漏洞，该漏洞允许在成功的man-in-the-middle攻击明文HTTP会话时，在create unbinding ad servers.sh中进行配置注入。
solution:Upgrade nlnetlabs unbound to a higher version than 1.9.5,and avoid the version (,1.9.5); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0