CVE-2009-4008

Опубликовано: 02 июн. 2011

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*

Версия до 1.4.3 (включая)

cpe:2.3:a:nlnetlabs:unbound:0.0:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.1:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.2:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.3:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.4:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.5:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.6:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.7:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.7.2:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.8:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.09:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.10:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:0.11:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:nlnetlabs:unbound:1.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00272

Низкий

5 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2009-4008

ubuntu

больше 14 лет назад

Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query.

CVE-2009-4008

debian

больше 14 лет назад

Unbound before 1.4.4 does not send responses for signed zones after mi ...

GHSA-cjjv-pc59-mghf

github

больше 3 лет назад

Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query.

EPSS

Процентиль: 50%

0.00272

Низкий

5 Medium

CVSS2

Дефекты

CWE-399