Unrated severityNVD Advisory· Published Dec 20, 2011· Updated Apr 29, 2026
CVE-2011-4869
CVE-2011-4869
Description
validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.
Affected products
39cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*+ 38 more
- cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*range: <=1.4.12
- cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.09:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.11:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txtnvdPatchVendor Advisory
- www.kb.cert.org/vuls/id/209659nvdPatchUS Government Resource
- lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.htmlnvd
- osvdb.org/77910nvd
- secunia.com/advisories/47326nvd
- www.debian.org/security/2011/dsa-2370nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/71868nvd
News mentions
0No linked articles in our index yet.