validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-12-20T11:00:00

Updated: 2024-08-07T00:16:34.980Z

Reserved: 2011-12-20T00:00:00

Link: CVE-2011-4869

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-12-20T11:55:08.820

Modified: 2024-11-21T01:33:09.653

Link: CVE-2011-4869

cve-icon Redhat

No data.