Unrated severityNVD Advisory· Published Dec 20, 2011· Updated Apr 29, 2026
CVE-2011-4528
CVE-2011-4528
Description
Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response.
Affected products
41cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*+ 40 more
- cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*range: <=1.4.13
- cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.09:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.11:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.12:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.14:rc1:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txtnvdPatchVendor Advisory
- www.kb.cert.org/vuls/id/209659nvdPatchThird Party AdvisoryUS Government Resource
- lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.htmlnvd
- osvdb.org/77909nvd
- secunia.com/advisories/47326nvd
- www.debian.org/security/2011/dsa-2370nvd
News mentions
0No linked articles in our index yet.