CVE

Id
52781  
CVE No.
CVE-2011-4869  
Status
Candidate  
Description
validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.  
Phase
Assigned (20111220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
560311 52781 CVE-2011-4869 CONFIRM:http://unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txt  View
560312 52781 CVE-2011-4869 DEBIAN:DSA-2370  View
560313 52781 CVE-2011-4869 URL:http://www.debian.org/security/2011/dsa-2370  View
560314 52781 CVE-2011-4869 FEDORA:FEDORA-2011-17282  View
560315 52781 CVE-2011-4869 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.html  View
560316 52781 CVE-2011-4869 FEDORA:FEDORA-2011-17337  View
560317 52781 CVE-2011-4869 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.html  View
560318 52781 CVE-2011-4869 CERT-VN:VU#209659  View
560319 52781 CVE-2011-4869 URL:http://www.kb.cert.org/vuls/id/209659  View
560320 52781 CVE-2011-4869 OSVDB:77910  View
560321 52781 CVE-2011-4869 URL:http://osvdb.org/77910  View
560322 52781 CVE-2011-4869 SECUNIA:47326  View
560323 52781 CVE-2011-4869 URL:http://secunia.com/advisories/47326  View
560324 52781 CVE-2011-4869 XF:unbound-nsec3-dos(71868)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26358 JVNDB-2012-002065 MICROSYS PROMOTIC における任意のコードを実行される脆弱性 MICROSYS PROMOTIC には、任意のコードを実行される、またはサービス運用妨害 (データ破損およびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-4874 52781 7.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002065.html  View