Unbound is prone to a remote denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected application, resulting in a denial-of-service condition. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed. Versions prior to Unbound 1.4.3 are vulnerable.

Updates are available. Please see the references for details.

• http://unbound.net/index.html
• http://www.securityfocus.com/bid/38701
• http://www.unbound.net/pipermail/unbound-users/2010-March/001057.html

---

Updated on 2015-03-25