CVE Vulnerabilities

CVE-2011-1922

Published: May 31, 2011 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.

Affected Software

NameVendorStart VersionEnd Version
UnboundNlnetlabs1.0.0 (including)1.0.0 (including)
UnboundNlnetlabs1.0.1 (including)1.0.1 (including)
UnboundNlnetlabs1.0.2 (including)1.0.2 (including)
UnboundNlnetlabs1.1.0 (including)1.1.0 (including)
UnboundNlnetlabs1.1.1 (including)1.1.1 (including)
UnboundNlnetlabs1.2.0 (including)1.2.0 (including)
UnboundNlnetlabs1.2.1 (including)1.2.1 (including)
UnboundNlnetlabs1.3.0 (including)1.3.0 (including)
UnboundNlnetlabs1.3.1 (including)1.3.1 (including)
UnboundNlnetlabs1.3.2 (including)1.3.2 (including)
UnboundNlnetlabs1.3.3 (including)1.3.3 (including)
UnboundNlnetlabs1.3.4 (including)1.3.4 (including)
UnboundNlnetlabs1.4.0 (including)1.4.0 (including)
UnboundNlnetlabs1.4.1 (including)1.4.1 (including)
UnboundNlnetlabs1.4.2 (including)1.4.2 (including)
UnboundNlnetlabs1.4.3 (including)1.4.3 (including)
UnboundNlnetlabs1.4.4 (including)1.4.4 (including)
UnboundNlnetlabs1.4.5 (including)1.4.5 (including)
UnboundNlnetlabs1.4.6 (including)1.4.6 (including)
UnboundNlnetlabs1.4.7 (including)1.4.7 (including)
UnboundNlnetlabs1.4.8 (including)1.4.8 (including)
UnboundNlnetlabs1.4.9 (including)1.4.9 (including)
UnboundUbuntulucid*
UnboundUbuntumaverick*
UnboundUbuntunatty*
UnboundUbuntuupstream*

References