CVE-2009-3602
Publication date 13 October 2009
Last updated 24 July 2024
Ubuntu priority
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.