VDB

GCVE-VVD-MAGEIA-2021-154

GCVE-VVD-MAGEIA-2021-154
Advisory Published
Vulnetix · Advisory published July 13, 2021
Unbound contains a local vulnerability that would allow for a local symlink attack. When writing the PID file Unbound creates the file if it is not there, or opens an existing file for writing. In case the file was already present, it would follow symlinks if the file happened to be a symlink instead of a regular file (CVE-2020-28935).

Affected Products

VendorProductVersionsPlatforms
Mageiaclamav0 (affected), 0.103.3-1.mga8 (unaffected)
Mageiaunbound0 (affected), 1.10.1-1.1.mga7 (unaffected), 0 (affected), 1.10.1-1.1.mga7 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›