Denial of Service Vulnerability in Unbound DNS Resolver
CVE-2009-4008

Currently unrated

Key Information:

Vendor: Nlnetlabs
Status: Unbound
Vendor: CVE Published:; 2 June 2011

What is CVE-2009-4008?

Unbound versions before 1.4.4 are susceptible to a denial of service condition. This vulnerability arises when Unbound mishandles specific queries, resulting in a failure to send responses for signed zones. As a consequence, remote attackers can exploit this flaw by submitting crafted queries, which can lead to an outage of DNSSEC functionalities. Ensuring you are using a patched version is essential to mitigate this risk.