CVE-2011-4528

Published: 20 December 2011

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response.

Priority

Status

Package	Release	Status
unbound Launchpad, Ubuntu, Debian	hardy	Does not exist
	lucid	Released (1.4.1-2ubuntu0.2)
	maverick	Released (1.4.5-1ubuntu1.2)
	natty	Released (1.4.9-0ubuntu1.2)
	oneiric	Released (1.4.12-1ubuntu1)
	upstream	Not vulnerable (1.4.14-1)

References

http://www.kb.cert.org/vuls/id/209659
http://unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txt
https://www.cve.org/CVERecord?id=CVE-2011-4528
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.