CVE-2011-4869

Executive Summary

Informations
Name	CVE-2011-4869	First vendor Publication	2011-12-20
Vendor	Cve	Last vendor Modification	2012-11-06

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score	7.8	Attack Range	Network
Cvss Impact Score	6.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4869

CWE : Common Weakness Enumeration

id	Name
CWE-399	Resource Management Errors

CPE : Common Platform Enumeration

Type	Description	Count
Application	Unbound Unbound cpe:/a:unbound:unbound:1.4.9 cpe:/a:unbound:unbound:1.4.8 cpe:/a:unbound:unbound:1.4.7 cpe:/a:unbound:unbound:1.4.6 cpe:/a:unbound:unbound:1.4.5 cpe:/a:unbound:unbound:1.4.4 cpe:/a:unbound:unbound:1.4.3 cpe:/a:unbound:unbound:1.4.2 cpe:/a:unbound:unbound:1.4.12 cpe:/a:unbound:unbound:1.4.11 cpe:/a:unbound:unbound:1.4.10 cpe:/a:unbound:unbound:1.4.1 cpe:/a:unbound:unbound:1.4.0 cpe:/a:unbound:unbound:1.3.4 cpe:/a:unbound:unbound:1.3.3 cpe:/a:unbound:unbound:1.3.2 cpe:/a:unbound:unbound:1.3.1 cpe:/a:unbound:unbound:1.3.0 cpe:/a:unbound:unbound:1.2.1 cpe:/a:unbound:unbound:1.2.0 cpe:/a:unbound:unbound:1.1.1 cpe:/a:unbound:unbound:1.1.0 cpe:/a:unbound:unbound:1.0.2 cpe:/a:unbound:unbound:1.0.1 cpe:/a:unbound:unbound:1.0.0 cpe:/a:unbound:unbound:0.8 cpe:/a:unbound:unbound:0.7.2 cpe:/a:unbound:unbound:0.7.1 cpe:/a:unbound:unbound:0.7 cpe:/a:unbound:unbound:0.6 cpe:/a:unbound:unbound:0.5 cpe:/a:unbound:unbound:0.4 cpe:/a:unbound:unbound:0.3 cpe:/a:unbound:unbound:0.2 cpe:/a:unbound:unbound:0.11 cpe:/a:unbound:unbound:0.10 cpe:/a:unbound:unbound:0.1 cpe:/a:unbound:unbound:0.09 cpe:/a:unbound:unbound:0.0	39

Open Source Vulnerability Database (OSVDB)

id	Description
77910	Unbound NSEC3-Signed Zones Response Parsing Remote DoS

Internal Sources (Detail)

Source	Url
CERT-VN	http://www.kb.cert.org/vuls/id/209659
CONFIRM	http://unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txt
DEBIAN	http://www.debian.org/security/2011/dsa-2370
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071525... http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071535...
OSVDB	http://osvdb.org/77910
SECUNIA	http://secunia.com/advisories/47326
XF	http://xforce.iss.net/xforce/xfdb/71868