CVE catalog

CVE-2019-18934

unbound affected and fixed versions

[CVE catalog]

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.20% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityunbound1.26.2-0+deb13u1Fixed[CVE-2019-18934]
Debiantrixieunbound1.22.0-2+deb13u3Fixed[CVE-2019-18934]
Debiantrixieunbound1.9.6-1FixedDistribution-reported fixed boundary[CVE-2019-18934]
Debiansidunbound1.26.2-1Fixed[CVE-2019-18934]
Debiansidunbound1.9.6-1FixedDistribution-reported fixed boundary[CVE-2019-18934]
Debianforkyunbound1.26.2-1Fixed[CVE-2019-18934]
Debianforkyunbound1.9.6-1FixedDistribution-reported fixed boundary[CVE-2019-18934]
Debianbookworm-securityunbound1.17.1-2+deb12u3Fixed[CVE-2019-18934]
Debianbookwormunbound1.17.1-2+deb12u4Fixed[CVE-2019-18934]
Debianbookwormunbound1.9.6-1FixedDistribution-reported fixed boundary[CVE-2019-18934]

Showing 10 fix observations. All 37 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Alpine3.10unbound1.9.1-r4UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.11unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.12unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.13unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.14unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.15unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.16unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.17unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.18unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.19unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.20unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.21unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.22unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.23unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.24unbound1.9.5-r0UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.8unbound1.7.3-r2UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Alpine3.9unbound1.8.3-r3UnknownSource applicability is not established[ALPINE-CVE-2019-18934]
Debianbookwormunbound1.17.1-2+deb12u4Fixed[CVE-2019-18934]
Debianbookwormunbound1.9.6-1FixedDistribution-reported fixed boundary[CVE-2019-18934]
Debianbookworm-securityunbound1.17.1-2+deb12u3Fixed[CVE-2019-18934]
Debianforkyunbound1.26.2-1Fixed[CVE-2019-18934]
Debianforkyunbound1.9.6-1FixedDistribution-reported fixed boundary[CVE-2019-18934]
Debiansidunbound1.26.2-1Fixed[CVE-2019-18934]
Debiansidunbound1.9.6-1FixedDistribution-reported fixed boundary[CVE-2019-18934]
Debiantrixieunbound1.22.0-2+deb13u3Fixed[CVE-2019-18934]
Debiantrixieunbound1.9.6-1FixedDistribution-reported fixed boundary[CVE-2019-18934]
Debiantrixie-securityunbound1.26.2-0+deb13u1Fixed[CVE-2019-18934]
Opensuseleap 15.1libunbound-devel-mini1.6.8-lp151.8.3.1UnknownSource applicability is not established[OPENSUSE-SU-2020:0912-1]
Opensuseleap 15.1unbound1.6.8-lp151.8.3.1UnknownSource applicability is not established[OPENSUSE-SU-2020:0912-1]
Opensuseleap 15.2libunbound-devel-mini1.6.8-lp152.9.3.1UnknownSource applicability is not established[OPENSUSE-SU-2020:0913-1]
Opensuseleap 15.2unbound1.6.8-lp152.9.3.1UnknownSource applicability is not established[OPENSUSE-SU-2020:0913-1]
Suselinux enterprise high performance computing 15-esposunbound1.6.8-3.6.1UnknownSource applicability is not established[SUSE-SU-2020:1819-1]
Suselinux enterprise high performance computing 15-ltssunbound1.6.8-3.6.1UnknownSource applicability is not established[SUSE-SU-2020:1819-1]
Suselinux enterprise module for basesystem 15 sp1unbound1.6.8-10.3.1UnknownSource applicability is not established[SUSE-SU-2020:1772-1]
Suselinux enterprise module for basesystem 15 sp2unbound1.6.8-10.3.1UnknownSource applicability is not established[SUSE-SU-2020:1772-1]
Suselinux enterprise server 15-ltssunbound1.6.8-3.6.1UnknownSource applicability is not established[SUSE-SU-2020:1819-1]
Suselinux enterprise server for sap applications 15unbound1.6.8-3.6.1UnknownSource applicability is not established[SUSE-SU-2020:1819-1]
Original provider fields
{
  "package_releases": [
    {
      "name": "unbound",
      "status": "fixed",
      "release": "sid",
      "version": "1.26.2-1"
    },
    {
      "name": "unbound",
      "status": "fixed",
      "release": "forky",
      "version": "1.26.2-1"
    },
    {
      "name": "unbound",
      "status": "fixed",
      "release": "trixie",
      "version": "1.22.0-2+deb13u3"
    },
    {
      "name": "unbound",
      "status": "fixed",
      "release": "trixie-security",
      "version": "1.26.2-0+deb13u1"
    },
    {
      "name": "unbound",
      "status": "fixed",
      "release": "bookworm",
      "version": "1.17.1-2+deb12u4"
    },
    {
      "name": "unbound",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "1.17.1-2+deb12u3"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "unbound",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "1.9.6-1"
    },
    {
      "bug": null,
      "name": "unbound",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "1.9.6-1"
    },
    {
      "bug": null,
      "name": "unbound",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "1.9.6-1"
    },
    {
      "bug": null,
      "name": "unbound",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "1.9.6-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.1-r4"
            }
          ]
        }
      ],
      "release": "3.10",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.11",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.12",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.13",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.14",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.15",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.16",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.9.5-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.9.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.7.3-r2"
            }
          ]
        }
      ],
      "release": "3.8",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.7.3-r2",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.6.4"
            },
            {
              "fixed": "1.8.3-r3"
            }
          ]
        }
      ],
      "release": "3.9",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-18934",
      "fixed_version": "1.8.3-r3",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2019-18934",
      "provider_updated_at": "2026-09-21T06:17:52.507090914Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-10.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1772-1",
      "fixed_version": "1.6.8-10.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:1772-1",
      "provider_updated_at": "2026-02-04T03:40:15.479853Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-10.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1772-1",
      "fixed_version": "1.6.8-10.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:1772-1",
      "provider_updated_at": "2026-02-04T03:40:15.479853Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1819-1",
      "fixed_version": "1.6.8-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:1819-1",
      "provider_updated_at": "2026-02-04T02:39:24.796302Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1819-1",
      "fixed_version": "1.6.8-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:1819-1",
      "provider_updated_at": "2026-02-04T02:39:24.796302Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1819-1",
      "fixed_version": "1.6.8-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:1819-1",
      "provider_updated_at": "2026-02-04T02:39:24.796302Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1819-1",
      "fixed_version": "1.6.8-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:1819-1",
      "provider_updated_at": "2026-02-04T02:39:24.796302Z",
      "applicability_unknown": true
    },
    {
      "name": "libunbound-devel-mini",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-lp152.9.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2020:0913-1",
      "fixed_version": "1.6.8-lp152.9.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2020:0913-1",
      "provider_updated_at": "2026-02-04T02:20:00.225380Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-lp152.9.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2020:0913-1",
      "fixed_version": "1.6.8-lp152.9.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2020:0913-1",
      "provider_updated_at": "2026-02-04T02:20:00.225380Z",
      "applicability_unknown": true
    },
    {
      "name": "libunbound-devel-mini",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-lp151.8.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2020:0912-1",
      "fixed_version": "1.6.8-lp151.8.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2020:0912-1",
      "provider_updated_at": "2026-02-04T02:14:26.518116Z",
      "applicability_unknown": true
    },
    {
      "name": "unbound",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.8-lp151.8.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2020:0912-1",
      "fixed_version": "1.6.8-lp151.8.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2020:0912-1",
      "provider_updated_at": "2026-02-04T02:14:26.518116Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libunbound8]Unknown

    Source package: [unbound]

    Details (4)

    • 1.17.1-2+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

  • [libunbound-dev]Unknown

    Source package: [unbound]

    Details (4)

    • 1.17.1-2+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

  • [python3-unbound]Unknown

    Source package: [unbound]

    Details (4)

    • 1.17.1-2+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

  • [unbound]Unknown
    Details (4)

    • 1.17.1-2+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

  • [unbound-anchor]Unknown

    Source package: [unbound]

    Details (4)

    • 1.17.1-2+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

  • [unbound-host]Unknown

    Source package: [unbound]

    Details (4)

    • 1.17.1-2+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

    • 1.17.1-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · bookworm; dsa · unbound · debian · 12

[Debian 13 (Trixie)]

  • [libunbound8]Unknown

    Source package: [unbound]

    Details (6)

    • 1.22.0-2+deb13u3 · amd64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.2-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

  • [libunbound-dev]Unknown

    Source package: [unbound]

    Details (6)

    • 1.22.0-2+deb13u3 · amd64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.2-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

  • [python3-unbound]Unknown

    Source package: [unbound]

    Details (6)

    • 1.22.0-2+deb13u3 · amd64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.2-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

  • [unbound]Unknown
    Details (6)

    • 1.22.0-2+deb13u3 · amd64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.2-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

  • [unbound-anchor]Unknown

    Source package: [unbound]

    Details (6)

    • 1.22.0-2+deb13u3 · amd64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.2-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

  • [unbound-host]Unknown

    Source package: [unbound]

    Details (6)

    • 1.22.0-2+deb13u3 · amd64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.22.0-2+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

    • 1.26.2-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.9.6-1

      dsa · unbound · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]