← Database

CVE-2009-3602

HIGH CVSS: 7.5 Published: 2009-10-13 Modified: 2026-06-16

Description

Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.

Affected Platforms

Nlnetlabs Unbound

Weakness Type

CWE-310

References