CVE Vulnerabilities

CVE-2011-4869

Published: Dec 20, 2011 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

Affected Software

Name Vendor Start Version End Version
Unbound Unbound * 1.4.12 (including)
Unbound Unbound 0.0 (including) 0.0 (including)
Unbound Unbound 0.1 (including) 0.1 (including)
Unbound Unbound 0.2 (including) 0.2 (including)
Unbound Unbound 0.3 (including) 0.3 (including)
Unbound Unbound 0.4 (including) 0.4 (including)
Unbound Unbound 0.5 (including) 0.5 (including)
Unbound Unbound 0.6 (including) 0.6 (including)
Unbound Unbound 0.7 (including) 0.7 (including)
Unbound Unbound 0.7.1 (including) 0.7.1 (including)
Unbound Unbound 0.7.2 (including) 0.7.2 (including)
Unbound Unbound 0.8 (including) 0.8 (including)
Unbound Unbound 0.09 (including) 0.09 (including)
Unbound Unbound 0.10 (including) 0.10 (including)
Unbound Unbound 0.11 (including) 0.11 (including)
Unbound Unbound 1.0.0 (including) 1.0.0 (including)
Unbound Unbound 1.0.1 (including) 1.0.1 (including)
Unbound Unbound 1.0.2 (including) 1.0.2 (including)
Unbound Unbound 1.1.0 (including) 1.1.0 (including)
Unbound Unbound 1.1.1 (including) 1.1.1 (including)
Unbound Unbound 1.2.0 (including) 1.2.0 (including)
Unbound Unbound 1.2.1 (including) 1.2.1 (including)
Unbound Unbound 1.3.0 (including) 1.3.0 (including)
Unbound Unbound 1.3.1 (including) 1.3.1 (including)
Unbound Unbound 1.3.2 (including) 1.3.2 (including)
Unbound Unbound 1.3.3 (including) 1.3.3 (including)
Unbound Unbound 1.3.4 (including) 1.3.4 (including)
Unbound Unbound 1.4.0 (including) 1.4.0 (including)
Unbound Unbound 1.4.1 (including) 1.4.1 (including)
Unbound Unbound 1.4.2 (including) 1.4.2 (including)
Unbound Unbound 1.4.3 (including) 1.4.3 (including)
Unbound Unbound 1.4.4 (including) 1.4.4 (including)
Unbound Unbound 1.4.5 (including) 1.4.5 (including)
Unbound Unbound 1.4.6 (including) 1.4.6 (including)
Unbound Unbound 1.4.7 (including) 1.4.7 (including)
Unbound Unbound 1.4.8 (including) 1.4.8 (including)
Unbound Unbound 1.4.9 (including) 1.4.9 (including)
Unbound Unbound 1.4.10 (including) 1.4.10 (including)
Unbound Unbound 1.4.11 (including) 1.4.11 (including)

References