CVE Vulnerabilities

CVE-2011-4869

Published: Dec 20, 2011 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

Affected Software

Name Vendor Start Version End Version
Unbound Unbound * 1.4.12 (including)
Unbound Unbound 0.0 (including) 0.0 (including)
Unbound Unbound 0.1 (including) 0.1 (including)
Unbound Unbound 0.2 (including) 0.2 (including)
Unbound Unbound 0.3 (including) 0.3 (including)
Unbound Unbound 0.4 (including) 0.4 (including)
Unbound Unbound 0.5 (including) 0.5 (including)
Unbound Unbound 0.6 (including) 0.6 (including)
Unbound Unbound 0.7 (including) 0.7 (including)
Unbound Unbound 0.7.1 (including) 0.7.1 (including)
Unbound Unbound 0.7.2 (including) 0.7.2 (including)
Unbound Unbound 0.8 (including) 0.8 (including)
Unbound Unbound 0.09 (including) 0.09 (including)
Unbound Unbound 0.10 (including) 0.10 (including)
Unbound Unbound 0.11 (including) 0.11 (including)
Unbound Unbound 1.0.0 (including) 1.0.0 (including)
Unbound Unbound 1.0.1 (including) 1.0.1 (including)
Unbound Unbound 1.0.2 (including) 1.0.2 (including)
Unbound Unbound 1.1.0 (including) 1.1.0 (including)
Unbound Unbound 1.1.1 (including) 1.1.1 (including)
Unbound Unbound 1.2.0 (including) 1.2.0 (including)
Unbound Unbound 1.2.1 (including) 1.2.1 (including)
Unbound Unbound 1.3.0 (including) 1.3.0 (including)
Unbound Unbound 1.3.1 (including) 1.3.1 (including)
Unbound Unbound 1.3.2 (including) 1.3.2 (including)
Unbound Unbound 1.3.3 (including) 1.3.3 (including)
Unbound Unbound 1.3.4 (including) 1.3.4 (including)
Unbound Unbound 1.4.0 (including) 1.4.0 (including)
Unbound Unbound 1.4.1 (including) 1.4.1 (including)
Unbound Unbound 1.4.2 (including) 1.4.2 (including)
Unbound Unbound 1.4.3 (including) 1.4.3 (including)
Unbound Unbound 1.4.4 (including) 1.4.4 (including)
Unbound Unbound 1.4.5 (including) 1.4.5 (including)
Unbound Unbound 1.4.6 (including) 1.4.6 (including)
Unbound Unbound 1.4.7 (including) 1.4.7 (including)
Unbound Unbound 1.4.8 (including) 1.4.8 (including)
Unbound Unbound 1.4.9 (including) 1.4.9 (including)
Unbound Unbound 1.4.10 (including) 1.4.10 (including)
Unbound Unbound 1.4.11 (including) 1.4.11 (including)
Unbound Ubuntu lucid *
Unbound Ubuntu maverick *
Unbound Ubuntu natty *
Unbound Ubuntu oneiric *

References