[{"CVE":"CVE-2020-10772","severity":"important","public_date":"2020-06-10T00:00:00Z","advisories":["RHSA-2020:2642"],"bugzilla":"1846026","bugzilla_description":"CVE-2020-10772 unbound: incomplete fix for CVE-2020-12662 in RHEL7","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406->CWE-400","affected_packages":["unbound-0:1.6.6-5.el7_8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10772.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12662","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:2640","RHSA-2020:2419","RHSA-2020:2418","RHSA-2020:4181","RHSA-2020:2416","RHSA-2020:2414"],"bugzilla":"1837597","bugzilla_description":"CVE-2020-12662 unbound: amplification of an incoming query into a large number of queries directed to a target","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-406->CWE-400","affected_packages":["unbound-0:1.7.3-11.el8_2","unbound-0:1.6.6-4.el7_8","unbound-0:1.4.20-29.el6_10.1","unbound-0:1.7.3-9.el8_0","unbound-0:1.7.3-9.el8_1","unbound-0:1.6.6-2.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12662.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-12663","severity":"important","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:2640","RHSA-2020:2419","RHSA-2020:2418","RHSA-2020:4181","RHSA-2020:2416","RHSA-2020:2414"],"bugzilla":"1837604","bugzilla_description":"CVE-2020-12663 unbound: infinite loop via malformed DNS answers received from upstream servers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20->CWE-835","affected_packages":["unbound-0:1.7.3-11.el8_2","unbound-0:1.6.6-4.el7_8","unbound-0:1.4.20-29.el6_10.1","unbound-0:1.7.3-9.el8_0","unbound-0:1.7.3-9.el8_1","unbound-0:1.6.6-2.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12663.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-18934","severity":"moderate","public_date":"2019-11-26T00:00:00Z","advisories":["RHSA-2020:1716"],"bugzilla":"1776762","bugzilla_description":"CVE-2019-18934 unbound: command injection with data coming from a specially crafted IPSECKEY answer","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-78","affected_packages":["unbound-0:1.7.3-10.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18934.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2019-16866","severity":"low","public_date":"2019-10-03T00:00:00Z","advisories":[],"bugzilla":"1767955","bugzilla_description":"CVE-2019-16866 unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-822","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16866.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.3"},{"CVE":"CVE-2018-1000134","severity":"moderate","public_date":"2018-03-16T00:00:00Z","advisories":["RHSA-2018:1713"],"bugzilla":"1557531","bugzilla_description":"CVE-2018-1000134 unboundid-ldapsdk: Incorrect Access Control vulnerability in process function in SimpleBindRequest class","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":["unboundid-ldapsdk-0:4.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000134.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2017-15105","severity":"moderate","public_date":"2018-01-19T00:00:00Z","advisories":[],"bugzilla":"1507049","bugzilla_description":"CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15105.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L","cvss3_score":"5.4"},{"CVE":"CVE-2014-8602","severity":"low","public_date":"2014-12-08T00:00:00Z","advisories":["RHSA-2015:2455"],"bugzilla":"1172065","bugzilla_description":"CVE-2014-8602 unbound: specially crafted request can lead to denial of service","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-770","affected_packages":["unbound-0:1.4.20-26.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8602.json"}]