Skip to content
OpenAdvisories
Unscored DSA-2370-1 2 CVEs

unbound - several

Published Dec 22, 2011 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 unbound 1.4.6-1~lenny2
Debian · 6.0 unbound 1.4.6-1+squeeze2

Vulnerabilities 2

  • Unscored —

    Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zo…

  • Unscored —

    validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, whi…