Unbound

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Unbound records in CISA KEV

No Unbound vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Unbound 3 records LOW

Records

3 records

TI-2011-04189 CVE-2011-4869 · GHSA-6xqx-v8qv-h8xm

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof…

LOW 39

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response tha…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02985 Published 2011-12-20 No fix listed CWE-399

TI-2012-01098 CVE-2012-1192 · GHSA-w9x7-rg7h-623x

The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS…

LOW 31

The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01312 Published 2012-02-17 No fix listed

TI-2011-03899 CVE-2011-4528 · GHSA-q376-m379-55x8

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of…

LOW 28

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted respons…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02841 Published 2011-12-20 No fix listed CWE-399

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0