CVE-2009-3602: High severity unbound vulnerability
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3602?
CVE-2009-3602 has a high severity rating due to its potential to enable DNS spoofing attacks.
How do I fix CVE-2009-3602?
To fix CVE-2009-3602, upgrade the Unbound software to version 1.3.4 or later.
What impact does CVE-2009-3602 have on affected systems?
CVE-2009-3602 may allow remote attackers to downgrade secure DNS delegations, compromising the integrity of DNS responses.
Which versions of Unbound are affected by CVE-2009-3602?
CVE-2009-3602 affects Unbound versions prior to 1.3.4, including several earlier releases.
Is there a workaround for CVE-2009-3602 if I cannot update Unbound?
If unable to update, consider implementing additional DNS security measures, but upgrading to the patched version is recommended.