USN-4938-1
- Source
- https://ubuntu.com/security/notices/USN-4938-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4938-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/USN-4938-1
- Upstream
- Related
- Published
- 2021-05-06T12:58:29.699754Z
- Modified
- 2025-10-13T04:35:28Z
- Summary
- unbound vulnerabilities
- Details
-
It was discovered that Unbound contained multiple security issues. A remote attacker could possibly use these issues to cause a denial of service, inject arbitrary commands, execute arbitrary code, and overwrite local files.
- References
-
- https://ubuntu.com/security/notices/USN-4938-1
- https://ubuntu.com/security/CVE-2019-25031
- https://ubuntu.com/security/CVE-2019-25032
- https://ubuntu.com/security/CVE-2019-25033
- https://ubuntu.com/security/CVE-2019-25034
- https://ubuntu.com/security/CVE-2019-25035
- https://ubuntu.com/security/CVE-2019-25036
- https://ubuntu.com/security/CVE-2019-25037
- https://ubuntu.com/security/CVE-2019-25038
- https://ubuntu.com/security/CVE-2019-25039
- https://ubuntu.com/security/CVE-2019-25040
- https://ubuntu.com/security/CVE-2019-25041
- https://ubuntu.com/security/CVE-2019-25042
- https://ubuntu.com/security/CVE-2020-28935
Affected packages
Ubuntu:18.04:LTS / unbound
Package
- Name
- unbound
- Purl
- pkg:deb/ubuntu/unbound@1.6.7-1ubuntu2.4?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.6.7-1ubuntu2.4
Affected versions
1.*
1.6.5-1
1.6.7-1
1.6.7-1build1
1.6.7-1ubuntu1
1.6.7-1ubuntu2
1.6.7-1ubuntu2.1
1.6.7-1ubuntu2.2
1.6.7-1ubuntu2.3
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libunbound-dev",
"binary_version": "1.6.7-1ubuntu2.4"
},
{
"binary_name": "libunbound2",
"binary_version": "1.6.7-1ubuntu2.4"
},
{
"binary_name": "python-unbound",
"binary_version": "1.6.7-1ubuntu2.4"
},
{
"binary_name": "python3-unbound",
"binary_version": "1.6.7-1ubuntu2.4"
},
{
"binary_name": "unbound",
"binary_version": "1.6.7-1ubuntu2.4"
},
{
"binary_name": "unbound-anchor",
"binary_version": "1.6.7-1ubuntu2.4"
},
{
"binary_name": "unbound-host",
"binary_version": "1.6.7-1ubuntu2.4"
}
]
}
Database specific
cves_map
{
"cves": [
{
"id": "CVE-2019-25031",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25032",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25033",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25034",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25035",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25036",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25037",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25038",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25039",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25040",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25041",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25042",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2020-28935",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
Ubuntu:20.04:LTS / unbound
Package
- Name
- unbound
- Purl
- pkg:deb/ubuntu/unbound@1.9.4-2ubuntu1.2?arch=source&distro=focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.9.4-2ubuntu1.2
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libunbound-dev",
"binary_version": "1.9.4-2ubuntu1.2"
},
{
"binary_name": "libunbound8",
"binary_version": "1.9.4-2ubuntu1.2"
},
{
"binary_name": "python-unbound",
"binary_version": "1.9.4-2ubuntu1.2"
},
{
"binary_name": "python3-unbound",
"binary_version": "1.9.4-2ubuntu1.2"
},
{
"binary_name": "unbound",
"binary_version": "1.9.4-2ubuntu1.2"
},
{
"binary_name": "unbound-anchor",
"binary_version": "1.9.4-2ubuntu1.2"
},
{
"binary_name": "unbound-host",
"binary_version": "1.9.4-2ubuntu1.2"
}
]
}
Database specific
cves_map
{
"cves": [
{
"id": "CVE-2019-25031",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25032",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25033",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25034",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25035",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25036",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25037",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25038",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25039",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25040",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25041",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2019-25042",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2020-28935",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}