medium6.4
CVE-2012-1192
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, whi…
Impact
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Unbound | Unbound | through 1.4.10 Versions 0.0, 0.1, 0.2, 0.3, 0.4 |