Vulnerabilities > Nlnetlabs > Unbound > 1.4.8

DATE CVE VULNERABILITY TITLE RISK
2018-01-23 CVE-2017-15105 Improper Input Validation vulnerability in multiple products
A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records.
network
low complexity
nlnetlabs debian canonical CWE-20
5.0
2014-12-11 CVE-2014-8602 Resource Management Errors vulnerability in multiple products
iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals.
4.3
2011-05-31 CVE-2011-1922 Resource Management Errors vulnerability in Nlnetlabs Unbound
daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.
network
nlnetlabs CWE-399
4.3