CVE-2009-3602
published 2009-10-13CVE-2009-3602: Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS…
PriorityP434high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.98%
85.6th percentile
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | unbound | < unbound 1.3.4-1 (bookworm) | unbound 1.3.4-1 (bookworm) |
| nlnetlabs | unbound | <= 1.3.3 | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
| nlnetlabs | unbound | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3xrf-3v7w-582w: Unbound before 1
ghsa_unreviewed·2022-05-02
CVE-2009-3602 [HIGH] GHSA-3xrf-3v7w-582w: Unbound before 1
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.
OSV
CVE-2009-3602: Unbound before 1
osv·2009-10-13·CVSS 7.5
CVE-2009-3602 [HIGH] CVE-2009-3602: Unbound before 1
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.
Debian
CVE-2009-3602: unbound - Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, whic...
vendor_debian·2009·CVSS 7.5
CVE-2009-3602 [HIGH] CVE-2009-3602: unbound - Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, whic...
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.
Scope: local
bookworm: resolved (fixed in 1.3.4-1)
bullseye: resolved (fixed in 1.3.4-1)
forky: resolved (fixed in 1.3.4-1)
sid: resolved (fixed in 1.3.4-1)
trixie: resolved (fixed in 1.3.4-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/58836http://secunia.com/advisories/36996http://secunia.com/advisories/37913http://unbound.net/pipermail/unbound-users/2009-October/000852.htmlhttp://www.debian.org/security/2009/dsa-1963http://www.openwall.com/lists/oss-security/2009/10/09/2http://www.openwall.com/lists/oss-security/2009/10/09/3http://www.vupen.com/english/advisories/2009/2875https://exchange.xforce.ibmcloud.com/vulnerabilities/53729http://osvdb.org/58836http://secunia.com/advisories/36996http://secunia.com/advisories/37913http://unbound.net/pipermail/unbound-users/2009-October/000852.htmlhttp://www.debian.org/security/2009/dsa-1963http://www.openwall.com/lists/oss-security/2009/10/09/2http://www.openwall.com/lists/oss-security/2009/10/09/3http://www.vupen.com/english/advisories/2009/2875https://exchange.xforce.ibmcloud.com/vulnerabilities/53729
2009-10-13
Published