Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. NOTE: The vendor disputes that this is a vulnerability. Although the code...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 unbound

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1"}]}]

Debian:13 unbound

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1"}]}]

Debian:14 unbound

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1"}]}]

参照URL

advisory security-tracker.debian.org