Read the docs
TI-2011-04189 Aliases CVE-2011-4869GHSA-6xqx-v8qv-h8xm

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof…

Priority LOW 39CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

Why it matters now

EPSS 0.02985 87th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 39

CPEVersionsRoleVendor
cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:*up to 1.4.12VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:*0.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:*0.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:*0.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:*0.3VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:*0.4VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:*0.5VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:*0.6VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:*0.7VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:*0.7.1VulnerableUnbound
  • cpe:2.3:a:unbound:unbound:*:*:*:*:*:*:*:* Versions up to 1.4.12 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.0:*:*:*:*:*:*:* Versions 0.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.1:*:*:*:*:*:*:* Versions 0.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.2:*:*:*:*:*:*:* Versions 0.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.5:*:*:*:*:*:*:* Versions 0.5 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.6:*:*:*:*:*:*:* Versions 0.6 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.7:*:*:*:*:*:*:* Versions 0.7 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·Unbound
Show 29 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:*0.7.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:*0.8VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.09:*:*:*:*:*:*:*0.09VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:*0.10VulnerableUnbound
cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:*0.11VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:*1.3.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:*1.3.3VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:*1.3.4VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:*1.4.4VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:*1.4.6VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:*1.4.7VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:*1.4.8VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:*1.4.9VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.10:*:*:*:*:*:*:*1.4.10VulnerableUnbound
cpe:2.3:a:unbound:unbound:1.4.11:*:*:*:*:*:*:*1.4.11VulnerableUnbound
  • cpe:2.3:a:unbound:unbound:0.7.2:*:*:*:*:*:*:* Versions 0.7.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.8:*:*:*:*:*:*:* Versions 0.8 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.09:*:*:*:*:*:*:* Versions 0.09 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.10:*:*:*:*:*:*:* Versions 0.10 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:0.11:*:*:*:*:*:*:* Versions 0.11 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.3.4:*:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.10:*:*:*:*:*:*:* Versions 1.4.10 Vulnerable ·Unbound
  • cpe:2.3:a:unbound:unbound:1.4.11:*:*:*:*:*:*:* Versions 1.4.11 Vulnerable ·Unbound

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-4869
  2. 2026-10-03 Alias added: GHSA-6xqx-v8qv-h8xm

References

Patch 2

Advisory 3

Other 1

  • TI-2012-01098 The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS… CVSS 2.0MEDIUM 6.4
  • TI-2011-03899 Unbound before 1.4.13p2 attempts to free unallocated memory during processing of… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences