Unbound before 1.9.5 allows an out-of-bounds write in sldnsbgettoken_par. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
{ "urgency": "unimportant" }