CVE-2011-1922: Nlnetlabs Unbound

Medium severity, CVSS 4.3. EPSS: 7.1% chance of exploitation in the next 30 days.

daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.

Affected products

• Nlnetlabs Unbound: version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1.0 only; version 1.1.1 only; version 1.2.0 only; …

Published 2011-05-31. Last modified 2026-06-16.