CVE-2019-18934: OS Command Injection
Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with --enable-ipsecmod support, and ipsecmod is enabled and used in the configuration.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-18934?
CVE-2019-18934 is a vulnerability in the ipsec module of Unbound 1.6.4 through 1.9.4 that can lead to shell code execution.
How severe is CVE-2019-18934?
CVE-2019-18934 is considered to be a high severity vulnerability with a CVSS score of 7.3.
Which software versions are affected by CVE-2019-18934?
Unbound versions 1.6.4 through 1.9.4, Fedora 31, openSUSE Leap 15.1, and openSUSE Leap 15.2 are affected by CVE-2019-18934.
How can I exploit CVE-2019-18934?
To exploit CVE-2019-18934, an attacker needs to send a specially crafted answer to the vulnerable Unbound server.
How can I mitigate CVE-2019-18934?
To mitigate CVE-2019-18934, it is recommended to update to a patched version of Unbound and disable the ipsec module if it is not needed.