Denial of Service Vulnerability in Unbound DNS Resolver by NLnet Labs
CVE-2010-0969

Currently unrated

Key Information:

Vendor

Nlnetlabs

Status
Unbound
Vendor
CVE Published:
16 March 2010

What is CVE-2010-0969?

Unbound, the open-source DNS resolver developed by NLnet Labs, prior to version 1.4.3, suffers from a vulnerability affecting its operation on 64-bit platforms. This flaw occurs due to improper structure alignment, which can be exploited by remote attackers to trigger a denial of service. The exploit can lead to the daemon crashing, affecting the availability of the DNS resolver for legitimate users.

References

http://osvdb.org/62903
vdb-entryx_refsource_OSVDB
http://www.openwall.com/lists/oss-security/2010/03/12/3
mailing-listx_refsource_MLIST
http://secunia.com/advisories/38888
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.