CVE-2011-1922

Published: May 31, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.

Affected (22)

Products: Nlnetlabs: Unbound

Nlnetlabs

1 product

Unbound

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Nlnetlabs Unbound	Version 1.0.0
Nlnetlabs Unbound	Version 1.0.1
Nlnetlabs Unbound	Version 1.0.2
Nlnetlabs Unbound	Version 1.1.0
Nlnetlabs Unbound	Version 1.1.1
Nlnetlabs Unbound	Version 1.2.0
Nlnetlabs Unbound	Version 1.2.1
Nlnetlabs Unbound	Version 1.3.0
Nlnetlabs Unbound	Version 1.3.1
Nlnetlabs Unbound	Version 1.3.2
Nlnetlabs Unbound	Version 1.3.3
Nlnetlabs Unbound	Version 1.3.4
Nlnetlabs Unbound	Version 1.4.0
Nlnetlabs Unbound	Version 1.4.1
Nlnetlabs Unbound	Version 1.4.2
Nlnetlabs Unbound	Version 1.4.3
Nlnetlabs Unbound	Version 1.4.4
Nlnetlabs Unbound	Version 1.4.5
Nlnetlabs Unbound	Version 1.4.6
Nlnetlabs Unbound	Version 1.4.7
Nlnetlabs Unbound	Version 1.4.8
Nlnetlabs Unbound	Version 1.4.9