Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-4869
HistoryDec 20, 2011 - 11:55 a.m.

CVE-2011-4869

2011-12-2011:55:08
CWE-399
[email protected]
web.nvd.nist.gov
33
unbound
cve-2011-4869
nsec3
denial of service
dns
remote
daemon crash

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.0%

JSON

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

Affected configurations

NVD
Node
unboundunboundRange≤1.4.12
OR
unboundunboundMatch0.0
OR
unboundunboundMatch0.1
OR
unboundunboundMatch0.2
OR
unboundunboundMatch0.3
OR
unboundunboundMatch0.4
OR
unboundunboundMatch0.5
OR
unboundunboundMatch0.6
OR
unboundunboundMatch0.7
OR
unboundunboundMatch0.7.1
OR
unboundunboundMatch0.7.2
OR
unboundunboundMatch0.8
OR
unboundunboundMatch0.09
OR
unboundunboundMatch0.10
OR
unboundunboundMatch0.11
OR
unboundunboundMatch1.0.0
OR
unboundunboundMatch1.0.1
OR
unboundunboundMatch1.0.2
OR
unboundunboundMatch1.1.0
OR
unboundunboundMatch1.1.1
OR
unboundunboundMatch1.2.0
OR
unboundunboundMatch1.2.1
OR
unboundunboundMatch1.3.0
OR
unboundunboundMatch1.3.1
OR
unboundunboundMatch1.3.2
OR
unboundunboundMatch1.3.3
OR
unboundunboundMatch1.3.4
OR
unboundunboundMatch1.4.0
OR
unboundunboundMatch1.4.1
OR
unboundunboundMatch1.4.2
OR
unboundunboundMatch1.4.3
OR
unboundunboundMatch1.4.4
OR
unboundunboundMatch1.4.5
OR
unboundunboundMatch1.4.6
OR
unboundunboundMatch1.4.7
OR
unboundunboundMatch1.4.8
OR
unboundunboundMatch1.4.9
OR
unboundunboundMatch1.4.10
OR
unboundunboundMatch1.4.11

Related

nessus 6
openvas 10
securityvulns 2
fedora 2
ubuntucve 2
osv 1
nvd 2
gentoo 1
prion 2
cvelist 2
debiancve 2
debian 1
cert 1
cve 1
freebsd 1
nessus
nessus
GLSA-201311-18 : Unbound: Denial of Service
2013-11-29 00:00:00
Unbound < 1.4.14 / 1.4.13p2 Multiple DoS
2012-01-17 00:00:00
Debian DSA-2370-1 : unbound - several vulnerabilities
2012-01-12 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201311-18
2015-09-29 00:00:00
Fedora Update for unbound FEDORA-2011-17282
2012-04-02 00:00:00
Debian Security Advisory DSA 2370-1 (unbound)
2012-02-11 00:00:00
securityvulns
securityvulns
Unbound DNS resolver DoS conditions
2011-12-26 00:00:00
[SECURITY] [DSA 2370-1] unbound security update
2011-12-26 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: unbound-1.4.14-1.fc16
2012-01-01 21:21:49
[SECURITY] Fedora 15 Update: unbound-1.4.14-1.fc15
2012-01-01 21:23:35
ubuntucve
ubuntucve
CVE-2011-4869
2011-12-20 00:00:00
CVE-2011-4528
2011-12-20 00:00:00
osv
osv
unbound - several
2011-12-22 00:00:00
nvd
nvd
CVE-2011-4869
2011-12-20 11:55:08
CVE-2011-4528
2011-12-20 11:55:05
gentoo
gentoo
Unbound: Denial of service
2013-11-28 00:00:00
prion
prion
Design/Logic Flaw
2011-12-20 11:55:00
Double free
2011-12-20 11:55:00
cvelist
cvelist
CVE-2011-4869
2011-12-20 11:00:00
CVE-2011-4528
2011-12-20 11:00:00
debiancve
debiancve
CVE-2011-4869
2011-12-20 11:55:08
CVE-2011-4528
2011-12-20 11:55:05
debian
debian
[SECURITY] [DSA 2370-1] unbound security update
2011-12-22 18:54:39
cert
cert
Unbound multiple denial-of-service vulnerabilities
2011-12-19 00:00:00
cve
cve
CVE-2011-4528
2011-12-20 11:55:05
freebsd
freebsd
unbound -- denial of service vulnerabilities from nonstandard redirection and denial of existence
2011-12-19 00:00:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.0%

JSON
Related for CVE-2011-4869
nessus6openvas10securityvulns2fedora2ubuntucve2osv1nvd2gentoo1prion2cvelist2debiancve2debian1cert1cve1freebsd1