Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2009-3602

Published: 13 October 2009

Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses.

Priority

Low

Status

Package Release Status
unbound
Launchpad, Ubuntu, Debian 		dapper Does not exist

hardy Does not exist

intrepid Ignored
(end of life, was needs-triage)
jaunty Ignored
(end of life)
karmic Not vulnerable
(1.3.4-1ubuntu2)
lucid Not vulnerable

maverick Not vulnerable

upstream
Released (1.3.4-1)

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading