GCVE - cpe:2.3:a:nlnetlabs:unbound:0.7.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nlnetlabs:unbound:0.7.1:*:*:*:*:*:*:*

part: a version: 0.7.1 update: *

Vendor	Nlnetlabs (`8b1a4e66-a9d8-56c4-ab0e-8a1df5313bb8`)
Product	Unbound (`0a834c0d-135b-5552-89e9-8a2c2d8ab3c5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/unbound`	purl2cpe	2026-06-01 10:16:51.617172
`pkg:deb/ubuntu/unbound`	purl2cpe	2026-06-01 10:16:51.617174
`pkg:github/nlnetlabs/unbound`	purl2cpe	2026-06-01 10:16:51.617175
`pkg:nlnetlabs/unbound`	purl2cpe	2026-06-01 10:16:51.617177
`pkg:rpm/opensuse/unbound`	purl2cpe	2026-06-01 10:16:51.617179

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-0969`	vulnerable	2026-06-08 04:54:04.210808	Details available Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Published: 2010-03-16T18:26:00.000Z Updated: 2024-08-07T01:06:52.548Z Open on db.gcve.eu Reference links http://osvdb.org/62903 http://www.openwall.com/lists/oss-security/2010/03/12/3 http://secunia.com/advisories/38888 http://www.unbound.net/pipermail/unbound-users/2010-March/001057.html http://marc.info/?l=oss-security&m=126876222231747&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4008`	vulnerable	2026-06-08 04:51:46.089819	Details available Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query. Published: 2011-06-02T20:00:00.000Z Updated: 2024-09-16T18:38:27.857Z Open on db.gcve.eu Reference links http://unbound.nlnetlabs.nl/downloads/unbound-1.4.4.tar.gz http://packages.debian.org/changelogs/pool/main/u/unbound/unbound_1.4.6-1/changelog http://www.debian.org/security/2011/dsa-2243	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3602`	vulnerable	2026-06-08 04:51:42.828622	Details available Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses. Published: 2009-10-13T10:00:00.000Z Updated: 2024-08-07T06:31:10.455Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37913 http://www.openwall.com/lists/oss-security/2009/10/09/3 http://secunia.com/advisories/36996 http://unbound.net/pipermail/unbound-users/2009-October/000852.html http://www.vupen.com/english/advisories/2009/2875	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.