All vulnerabilities

Servers and applications

CVE-2024-1931

NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path that can lead to an infinite loop. Unbound 1.18.0 introduced a feature that removes EDE records from responses with size higher than the client's advertised buffer size. Before removing all the EDE records however, it would try to see if trimming…

Severity
High 7.5
Published
7 Mar 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.19.2
Sources
NVD

Affected software

SoftwareAffected versions
UnboundServers and applications · cpe:a:nlnetlabs:unbound
  • From 1.18.0 before 1.19.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-1931
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-1931