PT-2011-5151
CVE-2011-4869
·
تاريخ النشر
2011-12-20
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Unbound versions prior to 1.4.13p2
Description
The issue is related to improper proof processing for NSEC3-signed zones in the validator/val nsec3.c component. This can be exploited by remote DNS servers sending a malformed response that lacks expected NSEC3 records, leading to a denial of service (daemon crash).
Recommendations
For versions prior to 1.4.13p2, update to version 1.4.13p2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾