What’s Vulnerable › Vulnerabilities

CVE-2009-4008

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-06-02 · updated 2026-06-16
• Weakness: CWE-399

Description

Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query.

Affected products

• NLnet Labs Unbound: through 1.4.3; 0.0, 0.1, 0.2, 0.3, 0.4, 0.5 (+23)

References

• http://packages.debian.org/changelogs/pool/main/u/unbound/unbound_1.4.6-1/changelog
• http://unbound.nlnetlabs.nl/downloads/unbound-1.4.4.tar.gz
• http://www.debian.org/security/2011/dsa-2243
• http://packages.debian.org/changelogs/pool/main/u/unbound/unbound_1.4.6-1/changelog
• http://unbound.nlnetlabs.nl/downloads/unbound-1.4.4.tar.gz
• http://www.debian.org/security/2011/dsa-2243

Get alerted when CVE-2009-4008 or the next vulnerability affects your stack