Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2009-3602
7.5
HIGHCVSS v2
Published
October 13, 2009
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.
NLnetLabs/unbound
GitHubUnbound is a validating, recursive, and caching DNS resolver.
GitHubUnbound is a validating, recursive, and caching DNS resolver.= 0.8, = 1.2.1, = 1.0.1, = 1.1.0, = 0.0, = 0.10, = 1.3.0, = 0.09, = 1.0.0, = 1.3.2, = 1.3.1, = 0.7, = 0.6, = 1.2.0, = 1.1.1, = 0.3, = 0.2, = 0.1, <= 1.3.3, = 1.0.2, = 0.7.2, = 0.7.1, = 0.11, = 0.5, = 0.4NVD