{"schemaVersion":3,"id":"SUSE-SU-2022:0301-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for unbound\n\nThis update for unbound fixes the following issues:\n\n- CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).\n- CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).\n- CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).\n- CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).\n- CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).\n- CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).\n- CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).\n- CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).\n- CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).\n- CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).\n- CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).\n- CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).\n- CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).","dates":{"published":"2022-02-02T09:05:06.000Z","modified":"2026-02-04T04:31:50.533Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"unbound&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","name":"unbound","label":"unbound&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/unbound&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","purlType":"rpm","versions":[{"text":"< 1.6.8-3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.8-3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"unbound&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","name":"unbound","label":"unbound&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/unbound&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","purlType":"rpm","versions":[{"text":"< 1.6.8-3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.8-3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"unbound&distro=SUSE Linux Enterprise Server 15-LTSS","name":"unbound","label":"unbound&distro=SUSE Linux Enterprise Server 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/unbound&distro=SUSE Linux Enterprise Server 15-LTSS","purlType":"rpm","versions":[{"text":"< 1.6.8-3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.8-3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"unbound&distro=SUSE Linux Enterprise Server for SAP Applications 15","name":"unbound","label":"unbound&distro=SUSE Linux Enterprise Server for SAP Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/unbound&distro=SUSE Linux Enterprise Server for SAP Applications 15","purlType":"rpm","versions":[{"text":"< 1.6.8-3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.8-3.9.1","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220301-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20220301-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1076963","label":"bugzilla.suse.com/1076963","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112009","label":"bugzilla.suse.com/1112009","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112033","label":"bugzilla.suse.com/1112033","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1179191","label":"bugzilla.suse.com/1179191","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185382","label":"bugzilla.suse.com/1185382","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185383","label":"bugzilla.suse.com/1185383","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185384","label":"bugzilla.suse.com/1185384","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185385","label":"bugzilla.suse.com/1185385","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185386","label":"bugzilla.suse.com/1185386","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185387","label":"bugzilla.suse.com/1185387","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185388","label":"bugzilla.suse.com/1185388","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185389","label":"bugzilla.suse.com/1185389","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185390","label":"bugzilla.suse.com/1185390","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185391","label":"bugzilla.suse.com/1185391","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185392","label":"bugzilla.suse.com/1185392","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185393","label":"bugzilla.suse.com/1185393","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25031","label":"www.suse.com/security/cve/CVE-2019-25031","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25032","label":"www.suse.com/security/cve/CVE-2019-25032","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25033","label":"www.suse.com/security/cve/CVE-2019-25033","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25034","label":"www.suse.com/security/cve/CVE-2019-25034","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25035","label":"www.suse.com/security/cve/CVE-2019-25035","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25036","label":"www.suse.com/security/cve/CVE-2019-25036","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25037","label":"www.suse.com/security/cve/CVE-2019-25037","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25038","label":"www.suse.com/security/cve/CVE-2019-25038","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25039","label":"www.suse.com/security/cve/CVE-2019-25039","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25040","label":"www.suse.com/security/cve/CVE-2019-25040","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25041","label":"www.suse.com/security/cve/CVE-2019-25041","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25042","label":"www.suse.com/security/cve/CVE-2019-25042","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28935","label":"www.suse.com/security/cve/CVE-2020-28935","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-25031","CVE-2019-25032","CVE-2019-25033","CVE-2019-25034","CVE-2019-25035","CVE-2019-25036","CVE-2019-25037","CVE-2019-25038","CVE-2019-25039","CVE-2019-25040","CVE-2019-25041","CVE-2019-25042","CVE-2020-28935"],"downstream":[],"duplicates":[],"related":["CVE-2019-25031","CVE-2019-25032","CVE-2019-25033","CVE-2019-25034","CVE-2019-25035","CVE-2019-25036","CVE-2019-25037","CVE-2019-25038","CVE-2019-25039","CVE-2019-25040","CVE-2019-25041","CVE-2019-25042","CVE-2020-28935"]},"timeline":[{"kind":"published","date":"2022-02-02T09:05:06.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:31:50.533Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T20:46:48.123Z","stale":false,"partial":false}}