CVE-2019-25038: Integer Overflow
DISPUTED Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-25038?
CVE-2019-25038 is a vulnerability in Unbound before version 1.9.5 that allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.
What is the severity of CVE-2019-25038?
The severity of CVE-2019-25038 is critical with a CVSS score of 9.8.
Is CVE-2019-25038 a disputed vulnerability?
Yes, CVE-2019-25038 is disputed. The vendor disputes that it is a vulnerability, but there are sources that claim it is.
How can CVE-2019-25038 be exploited?
Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited.
How can I fix CVE-2019-25038?
Upgrade Unbound to version 1.9.5 or later to fix CVE-2019-25038.