Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Unbound 注入漏洞
Vulnerability Description
Unbound是荷兰NLnet Labs（Nlnet Labs）基金会的一款支持验证递归和缓存的DNS解析器。 Unbound 1.9.5之前版本存在安全漏洞，该漏洞允许在成功的man-in-the-middle攻击明文HTTP会话时，在create unbinding ad servers.sh中进行配置注入。
CVSS Information
N/A
Vulnerability Type
N/A