CVE-2011-4869

validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.

• CWE-399

• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.html
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.html
• http://osvdb.org/77910
• http://secunia.com/advisories/47326
• http://unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txtPatch, Vendor Advisory
• http://www.debian.org/security/2011/dsa-2370
• http://www.kb.cert.org/vuls/id/209659Patch, US Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71868
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.html
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.html
• http://osvdb.org/77910
• http://secunia.com/advisories/47326
• http://unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txtPatch, Vendor Advisory
• http://www.debian.org/security/2011/dsa-2370
• http://www.kb.cert.org/vuls/id/209659Patch, US Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71868

Published

Dec 20, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4863The Tencent QQPimSecure (com.tencent.qqpimsecure) applicatio…
• CVE-2011-4864The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 …
• CVE-2011-4865The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad…
• CVE-2011-4866The Kaixin001 (com.kaixin001.activity) application 1.3.1 and…
• CVE-2011-4867The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 f…
• CVE-2011-4868The logging functionality in dhcpd in ISC DHCP before 4.2.3-…
• CVE-2011-4870Multiple buffer overflows in the (1) GUIControls, (2) BatchO…
• CVE-2011-4871Open Automation Software OPC Systems.NET before 5.0 allows r…
• CVE-2011-4872Multiple HTC Android devices including Desire HD FRG83D and …
• CVE-2011-4873Unspecified vulnerability in the server in Certec EDV atvise…
• CVE-2011-4874Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1…
• CVE-2011-4875Stack-based buffer overflow in HmiLoad in the runtime loader…