UpHeron
All vulnerabilities

Servers and applications

CVE-2020-28935

NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file was already present, they would follow symlinks if the file happened to be a…

Severity
Medium 5.5
Published
7 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.13.0
Sources
NVD

Affected software

SoftwareAffected versions
UnboundServers and applications · cpe:a:nlnetlabs:unbound
  • Every version before 1.13.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-28935
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-28935