CVE-2011-1922

2011-05-3120:55:00

CWE-399

[email protected]

web.nvd.nist.gov

unbound

cve-2011-1922

daemon

worker

remote code execution

denial of service

nvd

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.6%

JSON

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.

CPENameOperatorVersion
nlnetlabs:unboundnlnetlabs unboundeq1.3.4
nlnetlabs:unboundnlnetlabs unboundeq1.4.9
nlnetlabs:unboundnlnetlabs unboundeq1.2.1
nlnetlabs:unboundnlnetlabs unboundeq1.3.3
nlnetlabs:unboundnlnetlabs unboundeq1.4.3
nlnetlabs:unboundnlnetlabs unboundeq1.0.1
nlnetlabs:unboundnlnetlabs unboundeq1.4.7
nlnetlabs:unboundnlnetlabs unboundeq1.4.5
nlnetlabs:unboundnlnetlabs unboundeq1.1.0
nlnetlabs:unboundnlnetlabs unboundeq1.3.0

CPE	Name	Operator	Version
nlnetlabs:unbound	nlnetlabs unbound	eq	1.3.4
nlnetlabs:unbound	nlnetlabs unbound	eq	1.4.9
nlnetlabs:unbound	nlnetlabs unbound	eq	1.2.1
nlnetlabs:unbound	nlnetlabs unbound	eq	1.3.3
nlnetlabs:unbound	nlnetlabs unbound	eq	1.4.3
nlnetlabs:unbound	nlnetlabs unbound	eq	1.0.1
nlnetlabs:unbound	nlnetlabs unbound	eq	1.4.7
nlnetlabs:unbound	nlnetlabs unbound	eq	1.4.5
nlnetlabs:unbound	nlnetlabs unbound	eq	1.1.0
nlnetlabs:unbound	nlnetlabs unbound	eq	1.3.0