7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.015 Low
EPSS
Percentile
86.8%
Debian Security Advisory DSA-2370-1 [email protected]
http://www.debian.org/security/ Florian Weimer
December 22, 2011 http://www.debian.org/security/faq
Package : unbound
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2011-4528 CVE-2011-4869
It was discovered that Unbound, a recursive DNS resolver, would crash
when processing certain malformed DNS responses from authoritative DNS
servers, leading to denial of service.
CVE-2011-4528
Unbound attempts to free unallocated memory during processing
of duplicate CNAME records in a signed zone.
CVE-2011-4869
Unbound does not properly process malformed responses which
lack expected NSEC3 records.
For the oldstable distribution (lenny), these problems have been fixed in
version 1.4.6-1~lenny2.
For the stable distribution (squeeze), these problems have been fixed in
version 1.4.6-1+squeeze2.
For the testing distribution (wheezy) and the unstable distribution
(sid), these problems have been fixed in version 1.4.14-1.
We recommend that you upgrade your unbound packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 6 | all | libunbound2 | < 1.4.6-1+squeeze2 | libunbound2_1.4.6-1+squeeze2_all.deb |
Debian | 5 | all | unbound | < 1.4.6-1~lenny2 | unbound_1.4.6-1~lenny2_all.deb |
Debian | 5 | all | libunbound2 | < 1.4.6-1~lenny2 | libunbound2_1.4.6-1~lenny2_all.deb |
Debian | 6 | all | unbound-host | < 1.4.6-1+squeeze2 | unbound-host_1.4.6-1+squeeze2_all.deb |
Debian | 6 | all | libunbound-dev | < 1.4.6-1+squeeze2 | libunbound-dev_1.4.6-1+squeeze2_all.deb |
Debian | 5 | all | unbound-host | < 1.4.6-1~lenny2 | unbound-host_1.4.6-1~lenny2_all.deb |
Debian | 6 | all | unbound | < 1.4.6-1+squeeze2 | unbound_1.4.6-1+squeeze2_all.deb |
Debian | 5 | all | libunbound-dev | < 1.4.6-1~lenny2 | libunbound-dev_1.4.6-1~lenny2_all.deb |