CVE-2019-18934: Fedoraproject Fedora

High severity, CVSS 7.3. EPSS: 3.2% chance of exploitation in the next 30 days.

Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.

Affected products

• Fedoraproject Fedora: version 31 only
• Nlnetlabs Unbound: from 1.6.4, up to and including 1.9.4
• Opensuse Leap: version 15.1 only; version 15.2 only

Published 2019-11-19. Last modified 2026-06-17.