Vulnerabilities > CVE-2019-25040 - Infinite Loop vulnerability in multiple products

Summary

Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

References