CVE-2011-4869

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.09:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.10:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.11:*:*:*:*:*:*:*

History

No history.

Information

Published : 2011-12-20 11:55

Updated : 2024-02-28 11:41


NVD link : CVE-2011-4869

Mitre link : CVE-2011-4869

CVE.ORG link : CVE-2011-4869


JSON object : View

Products Affected

unbound

  • unbound
CWE
CWE-399

Resource Management Errors