Unbound DNS Resolver远程拒绝服务漏洞

BUGTRAQ ID: 47986 CVECAN ID: CVE-2011-1922 Unbound是开源的递归式DNS服务器软件。 Unbound DNS解析器在实现上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成服务器崩溃，拒绝服务合法用户。 仅在Unbound用断言配置并开启选项interface-automatic时会触发此漏洞。 Unbound Unbound 1.4.9 Unbound Unbound 1.4.3 Unbound Unbound 1.4.2 Unbound Unbound 1.3.4 Unbound Unbound 1.3.3 厂商补丁： Unbound...

CVE-2011-1922

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

CVE-2011-1922

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

DEBIAN-CVE-2011-1922

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

Design/Logic Flaw

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

CVE-2011-1922

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

CVE-2011-1922

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

CVE-2011-1922

CVE-2011-1922 affects Unbound 1.x prior to 1.4.10 when debugging is enabled and interface-automatic is on. A remote attacker can trigger assertion failure and daemon exit via a crafted DNS request due to improper error handling, resulting in a denial of service. Remediation per advisories is to u...

CVE-2011-1922

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DNS request that triggers improper error handling...

Fedora 15 : unbound-1.4.8-5.fc15 (2011-7540)

Denial of Service fix: CVE-2011-1922 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

[SECURITY] Fedora 15 Update: unbound-1.4.8-5.fc15

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

[SECURITY] [DSA 2243-1] unbound security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2243-1 [email protected] http://www.debian.org/security/ Florian Weimer May 27, 2011 http://www.debian.org/security/faq -...

Unbound DNS server DoS

DoS against DNSSEC signed zone...

[SECURITY] [DSA 2243-1] unbound security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2243-1 [email protected] http://www.debian.org/security/ Florian Weimer May 27, 2011 http://www.debian.org/security/faq -...

DSA-2243-1 unbound - design flaw

Bulletin has no description...

FreeBSD : Unbound -- an empty error packet handling assertion failure (dc96ac1f-86b1-11e0-9e85-00215af774f0)

Unbound developer reports : NLnet Labs was notified of an error in Unbound's code-path for error replies which is triggered under special conditions. The error causes the program to abort. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Unbound -- an empty error packet handling assertion failure

Unbound developer reports: NLnet Labs was notified of an error in Unbound's code-path for error replies which is triggered under special conditions. The error causes the program to abort...

Unbound DNS resolver denial of service vulnerability

Overview A specially crafted DNS query may cause Unbound to respond with an empty UDP packet which triggers an assertion failure and stops the daemon. Description NLnetLabs advisory states:"Certain types of DNS queries may cause Unbound to respond with a DNS error message. The code generating thi...

CVE-2010-0969

Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

Design/Logic Flaw

Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...