GCVE - cpe:2.3:a:nlnetlabs:unbound:1.2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nlnetlabs:unbound:1.2.0:*:*:*:*:*:*:*

part: a version: 1.2.0 update: *

Vendor	Nlnetlabs (`8b1a4e66-a9d8-56c4-ab0e-8a1df5313bb8`)
Product	Unbound (`0a834c0d-135b-5552-89e9-8a2c2d8ab3c5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/unbound`	purl2cpe	2026-06-01 10:16:51.617627
`pkg:deb/ubuntu/unbound`	purl2cpe	2026-06-01 10:16:51.617629
`pkg:github/nlnetlabs/unbound`	purl2cpe	2026-06-01 10:16:51.617631
`pkg:nlnetlabs/unbound`	purl2cpe	2026-06-01 10:16:51.617632
`pkg:rpm/opensuse/unbound`	purl2cpe	2026-06-01 10:16:51.617634

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1922`	vulnerable	2026-06-08 04:58:02.797902	Details available daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling. Published: 2011-05-31T20:00:00.000Z Updated: 2024-08-06T22:46:00.344Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061243.html http://www.securityfocus.com/bid/47986 http://secunia.com/advisories/44865 http://osvdb.org/72750 http://www.kb.cert.org/vuls/id/531342	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0969`	vulnerable	2026-06-08 04:54:04.218304	Details available Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Published: 2010-03-16T18:26:00.000Z Updated: 2024-08-07T01:06:52.548Z Open on db.gcve.eu Reference links http://osvdb.org/62903 http://www.openwall.com/lists/oss-security/2010/03/12/3 http://secunia.com/advisories/38888 http://www.unbound.net/pipermail/unbound-users/2010-March/001057.html http://marc.info/?l=oss-security&m=126876222231747&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4008`	vulnerable	2026-06-08 04:51:46.090012	Details available Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query. Published: 2011-06-02T20:00:00.000Z Updated: 2024-09-16T18:38:27.857Z Open on db.gcve.eu Reference links http://unbound.nlnetlabs.nl/downloads/unbound-1.4.4.tar.gz http://packages.debian.org/changelogs/pool/main/u/unbound/unbound_1.4.6-1/changelog http://www.debian.org/security/2011/dsa-2243	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3602`	vulnerable	2026-06-08 04:51:42.834401	Details available Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses. Published: 2009-10-13T10:00:00.000Z Updated: 2024-08-07T06:31:10.455Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37913 http://www.openwall.com/lists/oss-security/2009/10/09/3 http://secunia.com/advisories/36996 http://unbound.net/pipermail/unbound-users/2009-October/000852.html http://www.vupen.com/english/advisories/2009/2875	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.