daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0250 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 8.6. It addresses 14 CVEs:
    CVE-2011-4528, CVE-2014-8602, CVE-2023-50868, CVE-2020-12662, CVE-2019-18934, and 9 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1369 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.6. It addresses 28 CVEs:
    CVE-2026-42534, CVE-2026-32792, CVE-2011-4528, CVE-2014-8602, CVE-2025-11411, and 23 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0488 advisory.

    This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.2. It addresses 12 CVEs:
    CVE-2011-4528, CVE-2014-8602, CVE-2019-16866, CVE-2023-50868, CVE-2020-12662, and 7 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201110-12 (Unbound: Denial of Service)

    Multiple vulnerabilities have been discovered in unbound. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

According to its self-reported version number, the remote Unbound DNS resolver is affected by a denial of service vulnerability due improper error handling. An unauthenticated, remote attacker can exploit this, via a specially crafted DNS request, to cause an assertion failure and a daemon exit, resulting in a denial of service condition. Note that this vulnerability only exists when debugging functionality is enabled (e.g. --enable-checking' or '--enable-debug') and the interface-automatic option is turned on.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Denial of Service fix: CVE-2011-1922.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Unbound developer reports :

NLnet Labs was notified of an error in Unbound's code-path for error replies which is triggered under special conditions. The error causes the program to abort.

ID	Name	Product	Family	Type	Severity
356065	Rocky Linux 8.6 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_0250)	Nessus	Rocky Linux Local Security Checks	Local	critical
354372	Rocky Linux 9.6 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_1369)	Nessus	Rocky Linux Local Security Checks	Local	high
353828	Rocky Linux 9.2 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (ciqsa-2026_0488)	Nessus	Rocky Linux Local Security Checks	Local	high
56524	GLSA-201110-12 : Unbound: Denial of Service	Nessus	Gentoo Local Security Checks	Local	medium
55049	Unbound < 1.4.10 daemon/worker.c DNS Request Error Handling DoS	Nessus	DNS	Remote	medium
54978	Fedora 14 : unbound-1.4.8-2.fc14 (2011-7555)	Nessus	Fedora Local Security Checks	Local	medium
54825	FreeBSD : Unbound -- an empty error packet handling assertion failure (dc96ac1f-86b1-11e0-9e85-00215af774f0)	Nessus	FreeBSD Local Security Checks	Local	medium

Detections

Analytics

CVE-2011-1922

high

Tenable Plugins

critical

high

high

medium

medium

medium

medium