CVE-2020-28935
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-28935
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-28935.json
- Related
- Published
- 2020-12-07T22:15:20Z
- Modified
- 2023-11-29T08:31:17.153192Z
- Details
-
NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file was already present, they would follow symlinks if the file happened to be a symlink instead of a regular file. An additional chown of the file would then take place after it was written, making the user Unbound/NSD is supposed to run as the new owner of the file. If an attacker has local access to the user Unbound/NSD runs as, she could create a symlink in place of the PID file pointing to a file that she would like to erase. If then Unbound/NSD is killed and the PID file is not cleared, upon restarting with root privileges, Unbound/NSD will rewrite any file pointed at by the symlink. This is a local vulnerability that could create a Denial of Service of the system Unbound/NSD is running on. It requires an attacker having access to the limited permission user Unbound/NSD runs as and point through the symlink to a critical file on the system.
- References
Affected packages
Alpine:v3.12 / nsd
Package
- Name
- nsd
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed4.3.4-r0
Affected versions
3.*
3.2.7-r0
3.2.7-r1
3.2.8-r0
3.2.9-r0
3.2.10-r0
3.2.12-r0
3.2.13-r0
3.2.14-r0
3.2.15-r0
3.2.16-r0
3.2.16-r1
3.2.16-r2
4.*
4.0.0-r0
4.0.0-r1
4.0.1-r0
4.0.1-r1
4.0.2-r0
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.1-r0
4.1.1-r1
4.1.2-r0
4.1.3-r0
4.1.4-r0
4.1.6-r0
4.1.7-r0
4.1.7-r1
4.1.8-r0
4.1.9-r0
4.1.9-r1
4.1.10-r1
4.1.11-r0
4.1.13-r0
4.1.13-r1
4.1.14-r0
4.1.14-r1
4.1.15-r0
4.1.15-r1
4.1.15-r2
4.1.16-r0
4.1.16-r1
4.1.19-r0
4.1.20-r0
4.1.20-r1
4.1.21-r0
4.1.22-r0
4.1.23-r0
4.1.24-r0
4.1.24-r1
4.1.26-r0
4.1.27-r0
4.2.0-r0
4.2.1-r0
4.2.2-r0
4.2.2-r1
4.2.3-r0
4.2.3-r1
4.2.3-r2
4.2.3-r3
4.2.3-r4
4.2.4-r0
4.2.4-r1
4.3.0-r1
4.3.1-r1
Alpine:v3.13 / nsd
Package
- Name
- nsd
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed4.3.4-r0
Affected versions
3.*
3.2.7-r0
3.2.7-r1
3.2.8-r0
3.2.9-r0
3.2.10-r0
3.2.12-r0
3.2.13-r0
3.2.14-r0
3.2.15-r0
3.2.16-r0
3.2.16-r1
3.2.16-r2
4.*
4.0.0-r0
4.0.0-r1
4.0.1-r0
4.0.1-r1
4.0.2-r0
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.1-r0
4.1.1-r1
4.1.2-r0
4.1.3-r0
4.1.4-r0
4.1.6-r0
4.1.7-r0
4.1.7-r1
4.1.8-r0
4.1.9-r0
4.1.9-r1
4.1.10-r1
4.1.11-r0
4.1.13-r0
4.1.13-r1
4.1.14-r0
4.1.14-r1
4.1.15-r0
4.1.15-r1
4.1.15-r2
4.1.16-r0
4.1.16-r1
4.1.19-r0
4.1.20-r0
4.1.20-r1
4.1.21-r0
4.1.22-r0
4.1.23-r0
4.1.24-r0
4.1.24-r1
4.1.26-r0
4.1.27-r0
4.2.0-r0
4.2.1-r0
4.2.2-r0
4.2.2-r1
4.2.3-r0
4.2.3-r1
4.2.3-r2
4.2.3-r3
4.2.3-r4
4.2.4-r0
4.2.4-r1
4.3.0-r1
4.3.1-r1
4.3.2-r1
4.3.3-r1
Alpine:v3.14 / nsd
Package
- Name
- nsd
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed4.3.4-r0
Affected versions
3.*
3.2.7-r0
3.2.7-r1
3.2.8-r0
3.2.9-r0
3.2.10-r0
3.2.12-r0
3.2.13-r0
3.2.14-r0
3.2.15-r0
3.2.16-r0
3.2.16-r1
3.2.16-r2
4.*
4.0.0-r0
4.0.0-r1
4.0.1-r0
4.0.1-r1
4.0.2-r0
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.1-r0
4.1.1-r1
4.1.2-r0
4.1.3-r0
4.1.4-r0
4.1.6-r0
4.1.7-r0
4.1.7-r1
4.1.8-r0
4.1.9-r0
4.1.9-r1
4.1.10-r1
4.1.11-r0
4.1.13-r0
4.1.13-r1
4.1.14-r0
4.1.14-r1
4.1.15-r0
4.1.15-r1
4.1.15-r2
4.1.16-r0
4.1.16-r1
4.1.19-r0
4.1.20-r0
4.1.20-r1
4.1.21-r0
4.1.22-r0
4.1.23-r0
4.1.24-r0
4.1.24-r1
4.1.26-r0
4.1.27-r0
4.2.0-r0
4.2.1-r0
4.2.2-r0
4.2.2-r1
4.2.3-r0
4.2.3-r1
4.2.3-r2
4.2.3-r3
4.2.3-r4
4.2.4-r0
4.2.4-r1
4.3.0-r1
4.3.1-r1
4.3.2-r1
4.3.3-r1
Alpine:v3.15 / nsd
Package
- Name
- nsd
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed4.3.4-r0
Affected versions
3.*
3.2.7-r0
3.2.7-r1
3.2.8-r0
3.2.9-r0
3.2.10-r0
3.2.12-r0
3.2.13-r0
3.2.14-r0
3.2.15-r0
3.2.16-r0
3.2.16-r1
3.2.16-r2
4.*
4.0.0-r0
4.0.0-r1
4.0.1-r0
4.0.1-r1
4.0.2-r0
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.1-r0
4.1.1-r1
4.1.2-r0
4.1.3-r0
4.1.4-r0
4.1.6-r0
4.1.7-r0
4.1.7-r1
4.1.8-r0
4.1.9-r0
4.1.9-r1
4.1.10-r1
4.1.11-r0
4.1.13-r0
4.1.13-r1
4.1.14-r0
4.1.14-r1
4.1.15-r0
4.1.15-r1
4.1.15-r2
4.1.16-r0
4.1.16-r1
4.1.19-r0
4.1.20-r0
4.1.20-r1
4.1.21-r0
4.1.22-r0
4.1.23-r0
4.1.24-r0
4.1.24-r1
4.1.26-r0
4.1.27-r0
4.2.0-r0
4.2.1-r0
4.2.2-r0
4.2.2-r1
4.2.3-r0
4.2.3-r1
4.2.3-r2
4.2.3-r3
4.2.3-r4
4.2.4-r0
4.2.4-r1
4.3.0-r0
4.3.1-r0
4.3.2-r0
4.3.3-r0
Alpine:v3.16 / nsd
Package
- Name
- nsd
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed4.3.4-r0
Affected versions
3.*
3.2.7-r0
3.2.7-r1
3.2.8-r0
3.2.9-r0
3.2.10-r0
3.2.12-r0
3.2.13-r0
3.2.14-r0
3.2.15-r0
3.2.16-r0
3.2.16-r1
3.2.16-r2
4.*
4.0.0-r0
4.0.0-r1
4.0.1-r0
4.0.1-r1
4.0.2-r0
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.1-r0
4.1.1-r1
4.1.2-r0
4.1.3-r0
4.1.4-r0
4.1.6-r0
4.1.7-r0
4.1.7-r1
4.1.8-r0
4.1.9-r0
4.1.9-r1
4.1.10-r1
4.1.11-r0
4.1.13-r0
4.1.13-r1
4.1.14-r0
4.1.14-r1
4.1.15-r0
4.1.15-r1
4.1.15-r2
4.1.16-r0
4.1.16-r1
4.1.19-r0
4.1.20-r0
4.1.20-r1
4.1.21-r0
4.1.22-r0
4.1.23-r0
4.1.24-r0
4.1.24-r1
4.1.26-r0
4.1.27-r0
4.2.0-r0
4.2.1-r0
4.2.2-r0
4.2.2-r1
4.2.3-r0
4.2.3-r1
4.2.3-r2
4.2.3-r3
4.2.3-r4
4.2.4-r0
4.2.4-r1
4.3.0-r0
4.3.1-r0
4.3.2-r0
4.3.3-r0
Alpine:v3.17 / nsd
Package
- Name
- nsd
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed4.3.4-r0
Affected versions
3.*
3.2.7-r0
3.2.7-r1
3.2.8-r0
3.2.9-r0
3.2.10-r0
3.2.12-r0
3.2.13-r0
3.2.14-r0
3.2.15-r0
3.2.16-r0
3.2.16-r1
3.2.16-r2
4.*
4.0.0-r0
4.0.0-r1
4.0.1-r0
4.0.1-r1
4.0.2-r0
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.1-r0
4.1.1-r1
4.1.2-r0
4.1.3-r0
4.1.4-r0
4.1.6-r0
4.1.7-r0
4.1.7-r1
4.1.8-r0
4.1.9-r0
4.1.9-r1
4.1.10-r1
4.1.11-r0
4.1.13-r0
4.1.13-r1
4.1.14-r0
4.1.14-r1
4.1.15-r0
4.1.15-r1
4.1.15-r2
4.1.16-r0
4.1.16-r1
4.1.19-r0
4.1.20-r0
4.1.20-r1
4.1.21-r0
4.1.22-r0
4.1.23-r0
4.1.24-r0
4.1.24-r1
4.1.26-r0
4.1.27-r0
4.2.0-r0
4.2.1-r0
4.2.2-r0
4.2.2-r1
4.2.3-r0
4.2.3-r1
4.2.3-r2
4.2.3-r3
4.2.3-r4
4.2.4-r0
4.2.4-r1
4.3.0-r0
4.3.1-r0
4.3.2-r0
4.3.3-r0
Alpine:v3.18 / nsd
Package
- Name
- nsd
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed4.3.4-r0
Affected versions
3.*
3.2.7-r0
3.2.7-r1
3.2.8-r0
3.2.9-r0
3.2.10-r0
3.2.12-r0
3.2.13-r0
3.2.14-r0
3.2.15-r0
3.2.16-r0
3.2.16-r1
3.2.16-r2
4.*
4.0.0-r0
4.0.0-r1
4.0.1-r0
4.0.1-r1
4.0.2-r0
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.1-r0
4.1.1-r1
4.1.2-r0
4.1.3-r0
4.1.4-r0
4.1.6-r0
4.1.7-r0
4.1.7-r1
4.1.8-r0
4.1.9-r0
4.1.9-r1
4.1.10-r1
4.1.11-r0
4.1.13-r0
4.1.13-r1
4.1.14-r0
4.1.14-r1
4.1.15-r0
4.1.15-r1
4.1.15-r2
4.1.16-r0
4.1.16-r1
4.1.19-r0
4.1.20-r0
4.1.20-r1
4.1.21-r0
4.1.22-r0
4.1.23-r0
4.1.24-r0
4.1.24-r1
4.1.26-r0
4.1.27-r0
4.2.0-r0
4.2.1-r0
4.2.2-r0
4.2.2-r1
4.2.3-r0
4.2.3-r1
4.2.3-r2
4.2.3-r3
4.2.3-r4
4.2.4-r0
4.2.4-r1
4.3.0-r0
4.3.1-r0
4.3.2-r0
4.3.3-r0
Git / github.com/nlnetlabs/nsd
Affected ranges
- Type
- GIT
- Repo
- https://github.com/nlnetlabs/nsd
- Events
- Type
- GIT
- Repo
- https://github.com/nlnetlabs/unbound
- Events
Affected versions
Other
ALPHA
ALPHA2
ANSWERS
NAMED8_STATS
NSD_1_0_1_BETA5
NSD_1_0_1_BP
NSD_1_0_2_REL
NSD_1_0_2_merge_into_1_1_0
NSD_1_0_3_REL
NSD_1_0_3_last_merge
NSD_1_0_BP
NSD_1_1_0B2_REL
NSD_1_1_0_BP
NSD_1_1_0_REL
NSD_1_1_1
NSD_1_1_1_BP
NSD_1_2_0_REL
NSD_1_2_1_REL
NSD_1_2_2_REL
NSD_1_2_3_REL
NSD_1_2_4_REL
NSD_1_2_BP
NSD_1_2_end_of_merge
NSD_1_2_last_merge
NSD_1_3_0_ALPHA_1_REL
NSD_1_3_BP
NSD_1_4_0_ALPHA_1_REL
NSD_2_0_0_REL
NSD_2_0_0_WS_REL
NSD_2_0_1_REL
NSD_2_0_2_REL
NSD_2_0_BP
NSD_2_0_end_of_merge
NSD_2_0_last_merge
NSD_2_1_0_REL
NSD_2_1_1_REL
NSD_2_1_2_REL
NSD_2_1_3_REL
NSD_2_1_4_REL
NSD_2_1_5_REL
NSD_2_1_BP
NSD_2_1_end_of_merge
NSD_2_1_last_merge
NSD_2_2_0_REL
NSD_2_2_1_REL
NSD_2_2_BP2
NSD_2_2_end_of_merge
NSD_2_2_last_merge
NSD_2_3_0_REL
NSD_2_3_1_REL
NSD_2_3_3_REL
NSD_3_0_1_REL
NSD_3_0_2_REL
NSD_3_0_4_REL
NSD_3_2_1_REL
NSD_3_2_2_REL
NSD_3_2_4_REL
NSD_3_2_6_REL
NSD_3_2_7_REL
NSD_3_XML_SOCK_DB
NSD_3_signalsocket_solution
NSD_4_0_0_BETA1
NSD_4_0_0_BETA2
NSD_4_0_0_BETA3
NSD_4_0_0_BETA4
NSD_4_0_0_RC2
NSD_4_0_0_RC3
NSD_4_0_0_REL
NSD_4_0_0_imp_1
NSD_4_0_0_imp_2
NSD_4_0_0_imp_3
NSD_4_0_0_imp_4
NSD_4_0_0_imp_6
NSD_4_0_1_RC1
NSD_4_0_1_RC2
NSD_4_0_1_REL
NSD_4_0_2_REL
NSD_4_0_3_REL
NSD_4_1_0_RC1
NSD_4_1_0_REL
NSD_4_1_10_RC1
NSD_4_1_10_RC2
NSD_4_1_10_REL
NSD_4_1_11_RC1
NSD_4_1_11_RC2
NSD_4_1_13_RC1
NSD_4_1_13_REL
NSD_4_1_14_RC1
NSD_4_1_14_REL
NSD_4_1_15_RC1
NSD_4_1_16_RC1
NSD_4_1_16_REL
NSD_4_1_17_RC1
NSD_4_1_18_RC1
NSD_4_1_18_RC2
NSD_4_1_18_REL
NSD_4_1_19RC1
NSD_4_1_19_REL
NSD_4_1_1_RC1
NSD_4_1_1_REL
NSD_4_1_20_RC1
NSD_4_1_21_RC1
NSD_4_1_21_REL
NSD_4_1_22_RC1
NSD_4_1_24_RC1
NSD_4_1_25_RC1
NSD_4_1_25_REL
NSD_4_1_26_RC1
NSD_4_1_27_RC1
NSD_4_1_2_RC1
NSD_4_1_2_RC2
NSD_4_1_2_REL
NSD_4_1_4_RC1
NSD_4_1_5_REL
NSD_4_1_6_RC1
NSD_4_1_6_RC2
NSD_4_1_6_REL
NSD_4_1_7_RC1
NSD_4_1_8_RC1
NSD_4_1_8_REL
NSD_4_2_0_RC1
NSD_4_2_0_REL
NSD_4_2_1_RC1
NSD_4_2_1_REL
NSD_4_2_2_RC1
NSD_4_2_2_RC2
NSD_4_2_2_REL
NSD_4_2_3_RC1
NSD_4_2_3_REL
NSD_4_2_4_REL
NSD_4_3_0_RC1
NSD_4_3_0_REL
NSD_4_3_1_RC1
NSD_4_3_1_RC2
NSD_4_3_1_REL
NSD_4_3_2_RC1
NSD_4_3_2_REL
NSD_4_3_3_RC1
NSD_4_3_3_REL
PostScrewUp
before_optimization
final-svn-state
new_zf_parser_start
release-0.*
release-0.0
release-0.1
release-0.10
release-0.11
release-0.3
release-0.4
release-0.5
release-0.6
release-0.7
release-0.8
release-1.*
release-1.0.1
release-1.1.1
release-1.10.0rc1
release-1.10.0rc2
release-1.11.0
release-1.11.0rc1
release-1.12.0
release-1.12.0rc1
release-1.13.0rc1
release-1.13.0rc2
release-1.13.0rc3
release-1.13.0rc4
release-1.3.1
release-1.3.2
release-1.3.3
release-1.3.3rc1
release-1.4.0
release-1.4.0rc1
release-1.4.1
release-1.4.11
release-1.4.11rc1
release-1.4.11rc2
release-1.4.11rc3
release-1.4.12rc1
release-1.4.13
release-1.4.13rc1
release-1.4.13rc2
release-1.4.14
release-1.4.14rc1
release-1.4.17
release-1.4.17rc1
release-1.4.18rc1
release-1.4.18rc2
release-1.4.19
release-1.4.19rc1
release-1.4.2
release-1.4.20
release-1.4.22
release-1.4.22rc1
release-1.4.3
release-1.4.4
release-1.4.4rc1
release-1.4.5
release-1.4.5rc1
release-1.4.6
release-1.4.6rc1
release-1.4.7
release-1.4.7rc1
release-1.4.8rc1
release-1.4.9
release-1.4.9rc1
release-1.5.0rc1
release-1.5.1
release-1.5.10
release-1.5.10rc1
release-1.5.1rc1
release-1.5.1rc2
release-1.5.2
release-1.5.2rc1
release-1.5.3rc1
release-1.5.4
release-1.5.4rc1
release-1.5.5
release-1.5.5rc1
release-1.5.6
release-1.5.6rc1
release-1.5.7
release-1.5.8
release-1.5.8rc1
release-1.5.9rc1
release-1.6.0rc1
release-1.6.1rc1
release-1.6.1rc2
release-1.6.1rc3
release-1.6.2rc1
release-1.6.4rc1
release-1.6.4rc2
release-1.6.6rc1
release-1.6.6rc2
release-1.6.7
release-1.6.7rc1
release-1.7.0rc1
release-1.7.0rc2
release-1.7.0rc3
release-1.7.1rc1
release-1.7.2rc1
release-1.7.3rc1
release-1.8.0rc1
release-1.8.1rc1
release-1.8.2rc1
release-1.9.0rc1
release-1.9.1rc1
release-1.9.2
release-1.9.2rc1
release-1.9.2rc2
release-1.9.2rc3
release-1.9.3
release-1.9.3rc1
release-1.9.3rc2
release-1.9.4
release-1.9.6
release-1.9.6rc1