Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-4869

Опубликовано: 20 дек. 2011
Источник: nvd
CVSS2: 7.8
EPSS Низкий

Описание

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*
Версия до 1.4.12 (включая)
cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.09:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.10:*:*:*:*:*:*:*
cpe:2.3:a:unbound:unbound:1.4.11:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02083
Низкий

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

ubuntu логотип

CVE-2011-4869

ubuntu
около 14 лет назад

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

debian логотип

CVE-2011-4869

debian
около 14 лет назад

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly per ...

github логотип

GHSA-6xqx-v8qv-h8xm

github
больше 3 лет назад

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

EPSS

Процентиль: 84%
0.02083
Низкий

7.8 High

CVSS2

Дефекты

CWE-399