CVE-2019-25031: Medium severity nlnetlabs Unbound vulnerability
DISPUTED Unbound before 1.9.5 allows configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. createunboundadservers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-25031.
What is the severity of CVE-2019-25031?
The severity of CVE-2019-25031 is medium (5.9).
Which software is affected by CVE-2019-25031?
Unbound before version 1.9.5 and Debian Linux version 9.0 are affected by CVE-2019-25031.
What is the nature of the vulnerability in create_unbound_ad_servers.sh?
The vulnerability allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session.
Is CVE-2019-25031 considered a vulnerability by the vendor?
No, the vendor does not consider CVE-2019-25031 a vulnerability of the Unbound software.