Detections
Analytics
Unbound < 1.4.14 / 1.4.13p2 Multiple DoS
medium Nessus Plugin ID 57574
Language:
Synopsis
The remote name server is affected by multiple denial of service vulnerabilities.Description
According to its self-reported version number, the remote Unbound DNS resolver is affected by multiple denial of service vulnerabilities :- A denial of service vulnerability exists due to an attempt to free unallocated memory during the processing of duplicate CNAME records in a signed zone. An attacker can exploit this, via a specially crafted response, to cause a daemon crash, resulting in a denial of service condition. (CVE-2011-4528)
- A denial of service vulnerability exists due to improper proof processing for NSEC3-signed zones. An attacker can exploit this, via a malformed response that lacks expected NSEC3 records, to cause a daemon crash, resulting in a denial of service condition.
(CVE-2011-4869)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Unbound version 1.4.14 / 1.4.13p2 or later.See Also
Plugin Details
Severity: Medium
ID: 57574
File Name: unbound_1_4_14.nasl
Version: 1.7
Type: remote
Family: DNS
Published: 1/17/2012
Updated: 11/15/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/a:unbound:unbound
Required KB Items: Settings/ParanoidReport, unbound/version
Exploit Ease: No known exploits are available
Patch Publication Date: 12/19/2011
Vulnerability Publication Date: 12/19/2011
Reference Information
CVE: CVE-2011-4528, CVE-2011-4869
BID: 51115
CERT: 209659