CVE-2011-1922

Published: 31 May 2011

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.

Priority

Status

Package	Release	Status
unbound Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	lucid	Released (1.4.1-2ubuntu0.1)
	maverick	Released (1.4.5-1ubuntu1.1)
	natty	Released (1.4.9-0ubuntu1.1)
	upstream	Released (1.4.10)

References

http://www.kb.cert.org/vuls/id/531342
http://unbound.nlnetlabs.nl/downloads/CVE-2011-1922.txt
https://www.cve.org/CVERecord?id=CVE-2011-1922
NVD
Launchpad
Debian

Bugs

https://bugs.launchpad.net/bugs/788818

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›