[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd0sEqKL50m4TJjCvFej3O7t29bWE0PIZwvxN285Pi0Y":3,"g5a-risk:CVE-2019-16866":149},{"success":4,"data":5,"meta":147},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":87,"weaknesses":88,"weaknessesCount":53,"isActivelyExploited":103,"cisaInfo":26,"otxData":26,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":145,"notableEvents":146},"CVE-2019-16866","What is CVE-2019-16866?","Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.","Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the...","2019-10-03T19:15:09.55","2023-11-07T03:06:02.163",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.03506,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"nlnetlabs","unbound","*","cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"canonical","ubuntu_linux","19.04","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",2,[55,61,65,68,74,78,83],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002FNLnetLabs\u002Funbound\u002Fblob\u002Frelease-1.9.4\u002Fdoc\u002FChangelog","GitHub",[59,60],"Product","Release Notes",{"url":62,"source":63,"tags":64},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FE65NCWZZB2D75ZIYWPXKMVGSGNYW4JMC\u002F","Fedoraproject",[],{"url":66,"source":63,"tags":67},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FMLRHE7TQFAOV4MB2ELTOGESZYUL65NUJ\u002F",[],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fnlnetlabs.nl\u002Fdownloads\u002Funbound\u002FCVE-2019-16866.txt","Nlnetlabs",[72,73],"Patch","Vendor Advisory",{"url":75,"source":76,"tags":77},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FOct\u002F23","Seclists",[],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fusn.ubuntu.com\u002F4149-1\u002F","Ubuntu",[82],"Third Party Advisory",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2019\u002Fdsa-4544","Debian",[],7,[89,97],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-755","Improper Handling of Exceptional Conditions","The product does not handle or incorrectly handles an exceptional condition.","","Incomplete","Class","Simple",{"id":98,"name":99,"description":100,"extendedDescription":101,"status":94,"abstraction":102,"structure":96},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.","Base",false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2019-16866? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-16866, a high severity cyber security vulnerability from 2019. Unbound before 1.9.4 accesses uninitialized memory, which a...","CVE-2019-16866, CVE-2019-16866 vulnerability, CVE-2019-16866 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, nlnetlabs security, canonical security, unbound vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-16866",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-16866","Cybersecurity","CVE-2019-16866, CVE-2019-16866 vulnerability, CVE-2019-16866 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131,139],{"Operator":26,"Negate":26,"Nodes":132},[133],{"Operator":134,"Negate":26,"CPEMatch":135},"OR",[136],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":138,"VersionEndIncluding":26},"E9749EA7-25CA-48B0-9165-94D0B461D810","1.9.4",{"Operator":26,"Negate":26,"Nodes":140},[141],{"Operator":134,"Negate":26,"CPEMatch":142},[143],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":144,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CD783B0C-9246-47D9-A937-6144FE8BFF0F",[],[],{"lastModified":11,"cacheTime":148,"version":32},1792333031158,{"score":150,"band":151,"action":152,"scoredAt":153},48,"Medium","Plan remediation","2026-10-16T06:46:59.390203+00:00"]