CVE-2009-4008

Published: Jun 2, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query.

Affected (30)

Products: Nlnetlabs: Unbound

Nlnetlabs

1 product

Unbound

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Nlnetlabs Unbound	Up to 1.4.3
Nlnetlabs Unbound	Version 0.09
Nlnetlabs Unbound	Version 0.0
Nlnetlabs Unbound	Version 0.10
Nlnetlabs Unbound	Version 0.11
Nlnetlabs Unbound	Version 0.1
Nlnetlabs Unbound	Version 0.2
Nlnetlabs Unbound	Version 0.3
Nlnetlabs Unbound	Version 0.4
Nlnetlabs Unbound	Version 0.5
Nlnetlabs Unbound	Version 0.6
Nlnetlabs Unbound	Version 0.7.1
Nlnetlabs Unbound	Version 0.7.2
Nlnetlabs Unbound	Version 0.7
Nlnetlabs Unbound	Version 0.8
Nlnetlabs Unbound	Version 1.0.0
Nlnetlabs Unbound	Version 1.0.1
Nlnetlabs Unbound	Version 1.0.2
Nlnetlabs Unbound	Version 1.1.0
Nlnetlabs Unbound	Version 1.1.1
Nlnetlabs Unbound	Version 1.2.0
Nlnetlabs Unbound	Version 1.2.1
Nlnetlabs Unbound	Version 1.3.0
Nlnetlabs Unbound	Version 1.3.1
Nlnetlabs Unbound	Version 1.3.2
Nlnetlabs Unbound	Version 1.3.3
Nlnetlabs Unbound	Version 1.3.4
Nlnetlabs Unbound	Version 1.4.0
Nlnetlabs Unbound	Version 1.4.1
Nlnetlabs Unbound	Version 1.4.2