p PatchFirst

CVE-2009-3602

CVE-2009-3602

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.

EPSS 3.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • unbound Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.3.4-1

    Update to 1.3.4-1

  • unbound Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.3.4-1

    Update to 1.3.4-1

  • unbound Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.3.4-1

    Update to 1.3.4-1

Original sources

Check your server →