CVE-2011-4869

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a…

published December 20, 2011

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02985 · 87.1th percentile
Published
2011-12-20T11:00Z
EPSS history
Timeline
  • 20 DEC 11:00Z
    validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a…
    cvelistv5