CVE Daily

CVE-2009-3602

Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, whic...

High CVSS 7.5

Overview

Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.

CWE: CWE-310 Published: 2009-10-13T10:30:00.657
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags