PT-2011-5151
CVE-2011-4869
·
Publicado
2011-12-20
·
Atualizado
2017-08-29
Descrição por
CVSS 2.0
7.8
AltaMétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Unbound versions prior to 1.4.13p2
Description
The issue is related to improper proof processing for NSEC3-signed zones in the validator/val nsec3.c component. This can be exploited by remote DNS servers sending a malformed response that lacks expected NSEC3 records, leading to a denial of service (daemon crash).
Recommendations
For versions prior to 1.4.13p2, update to version 1.4.13p2 or later to resolve the issue.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾