Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 39

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response tha…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02985 Published 2011-12-20 No fix listed CWE-399
Priority LOW 28

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted respons…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02841 Published 2011-12-20 No fix listed CWE-399