Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2011-12-20T11:00:00

Updated: 2024-08-07T00:09:18.826Z

Reserved: 2011-11-22T00:00:00

Link: CVE-2011-4528

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-12-20T11:55:05.757

Modified: 2024-11-21T01:32:28.990

Link: CVE-2011-4528

cve-icon Redhat

No data.