CVE-2011-4869

validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...

FreeBSD : unbound -- denial of service vulnerabilities from nonstandard redirection and denial of existence (7ba65bfd-2a40-11e1-b96e-00215af774f0)

Unbound developer reports : Unbound crashes when confronted with a non-standard response from a server for a domain. This domain produces duplicate RRs from a certain type and is DNSSEC signed. Unbound also crashes when confronted with a query that eventually, and under specific circumstances,...

PT-2011-4972

Name of the Vulnerable Software and Affected Versions Unbound versions prior to 1.4.13p2 Description The issue allows remote DNS servers to cause a denial of service, resulting in a daemon crash, by sending a crafted response with duplicate CNAME records in a signed zone. This occurs due to an...

PT-2011-5151

Name of the Vulnerable Software and Affected Versions Unbound versions prior to 1.4.13p2 Description The issue is related to improper proof processing for NSEC3-signed zones in the validator/val nsec3.c component. This can be exploited by remote DNS servers sending a malformed response that lacks...

CVE-2011-4869: Undefined Security Weakness

validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...

CVE-2011-4528: Undefined Security Weakness

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service daemon crash via a crafted response...

Unbound < 1.4.14 Multiple DoS Vulnerabilities

Unbound is prone to multiple remote denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

unbound -- denial of service vulnerabilities from nonstandard redirection and denial of existence

Unbound developer reports: Unbound crashes when confronted with a non-standard response from a server for a domain. This domain produces duplicate RRs from a certain type and is DNSSEC signed. Unbound also crashes when confronted with a query that eventually, and under specific circumstances,...

Unbound multiple denial-of-service vulnerabilities

Overview A specially crafted DNS query containing signed duplicate resource records or a malformed NSEC3 signed resource record may cause Unbound to crash. Description NLnetLabs advisory states:== Description 1: crash on signed duplicate Resource Records There are authoritative servers that...

GLSA-201110-12 : Unbound: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201110-12 Unbound: Denial of Service Multiple vulnerabilities have been discovered in unbound. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a Denial of Service. Workaround ...

Unbound: Denial of service

Background Unbound is a validating, recursive, and caching DNS resolver. Description Multiple vulnerabilities have been discovered in unbound. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause a Denial of Service. Workaround There is no known...

FreeBSD Ports: unbound

The remote host is missing an update to the system as announced in the referenced advisory. VID dc96ac1f-86b1-11e0-9e85-00215af774f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID dc96ac1f-86b1-11e0-9e85-00215af774f0 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian Security Advisory DSA 2243-1 (unbound)

The remote host is missing an update to unbound announced via advisory DSA 2243-1. OpenVAS Vulnerability Test $Id: deb22431.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2243-1 unbound Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: unbound

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-2243-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for unbound FEDORA-2011-7555

Check for the Version of unbound OpenVAS Vulnerability Test Fedora Update for unbound FEDORA-2011-7555 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Unbound < 1.4.10 daemon/worker.c DNS Request Error Handling DoS

According to its self-reported version number, the remote Unbound DNS resolver is affected by a denial of service vulnerability due improper error handling. An unauthenticated, remote attacker can exploit this, via a specially crafted DNS request, to cause an assertion failure and a daemon exit,...

Debian DSA-2243-1 : unbound - design flaw

It was discovered that Unbound, a caching DNS resolver, ceases to provide answers for zones signed using DNSSEC after it has processed a crafted query. CVE-2009-4008 In addition, this update improves the level of DNSSEC support in the lenny version of Unbound so that it is possible for system...

Unbound < 1.4.4 Unbound Signed Zone Query Response DNSSEC Outage DoS

According to its self-reported version number, the remote Unbound DNS resolver is affected by a denial of service vulnerability due to a failure to send responses for signed zones after mishandling an unspecified query. An attacker can exploit this, via a crafted query, to cause a DNSSEC outage,...

Fedora Update for unbound FEDORA-2011-7555

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...