CVE-2009-0696

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
iscbind
9.4
iscbind
9.4.0
iscbind
9.4.0:a1
iscbind
9.4.0:a2
iscbind
9.4.0:a3
iscbind
9.4.0:a4
iscbind
9.4.0:a5
iscbind
9.4.0:a6
iscbind
9.4.0:b1
iscbind
9.4.0:b2
iscbind
9.4.0:b3
iscbind
9.4.0:b4
iscbind
9.4.0:rc1
iscbind
9.4.0:rc2
iscbind
9.4.1
iscbind
9.4.2
iscbind
9.4.2:rc1
iscbind
9.4.2:rc2
iscbind
9.4.3
iscbind
9.4.3:b1
iscbind
9.4.3:b2
iscbind
9.4.3:b3
iscbind
9.4.3:p2
iscbind
9.5
iscbind
9.5.0
iscbind
9.5.0:a1
iscbind
9.5.0:a2
iscbind
9.5.0:a3
iscbind
9.5.0:a4
iscbind
9.5.0:a5
iscbind
9.5.0:a6
iscbind
9.5.0:a7
iscbind
9.5.0:b1
iscbind
9.5.0:b2
iscbind
9.5.0:b3
iscbind
9.5.0:p1
iscbind
9.5.0:p2
iscbind
9.5.0:p2_w1
iscbind
9.5.0:p2_w2
iscbind
9.6
iscbind
9.6:r1
iscbind
9.6:r2
iscbind
9.6:r3
iscbind
9.6:r4
iscbind
9.6:r4_p1
iscbind
9.6:r5
iscbind
9.6:r5_b1
iscbind
9.6:r5_p1
iscbind
9.6:r6
iscbind
9.6:r6_b1
iscbind
9.6:r6_rc1
iscbind
9.6:r6_rc2
iscbind
9.6:r7
iscbind
9.6:r7_p1
iscbind
9.6:r7_p2
iscbind
9.6:r9
iscbind
9.6:r9_p1
iscbind
9.6.0
iscbind
9.6.0:a1
iscbind
9.6.0:b1
iscbind
9.6.0:p1
iscbind
9.6.0:rc1
iscbind
9.6.0:rc2
iscbind
9.6.1
iscbind
9.6.1:b1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bind9
bullseye
1:9.16.50-1~deb11u2
fixed
bullseye (security)
1:9.16.50-1~deb11u1
fixed
bookworm
1:9.18.28-1~deb12u2
fixed
bookworm (security)
1:9.18.28-1~deb12u2
fixed
sid
1:9.20.2-1
fixed
trixie
1:9.20.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
jaunty
Fixed 1:9.5.1.dfsg.P2-1ubuntu0.1
released
intrepid
Fixed 1:9.5.0.dfsg.P2-1ubuntu3.2
released
hardy
Fixed 1:9.4.2.dfsg.P2-2ubuntu0.2
released
dapper
Fixed 1:9.3.2-2ubuntu1.7
released
Common Weakness Enumeration
References