Search/CVE-2019-18934

● CVE — High

CVE-2019-18934

Vendorfedoraproject, opensuse, nlnetlabsProductfedora, leap, unboundDiscoveredNov 19, 2019UpdatedNov 21, 2024

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with --enable-ipsecmod support, and ipsecmod is enabled and used in the configuration.

View graph Watch Export

CVSS v3.1

7.3 HIGH

EPSS

3.20%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Related IOCs

0

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 26, 2026

▼ 0.01pp

3.21% → 3.20% over 3 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityLOW

IntegrityLOW

AvailabilityLOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Connections

4 relationships

Timeline

disclosure → media coverage

Nov 19, 2019

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024