vulnwire
4.3med

CVE-2007-0494

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Foru…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
45.3%
percentile 99%
Public exploits
0
none known

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.

Exploit prediction (EPSS)

45.26% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

Classification

Weakness

References

  • h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 · vendor-advisory, x_refsource_HP, x_transferred
  • securitytracker.com /id?1017573 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • docs.info.apple.com /article.html?artnum=305530 · x_refsource_CONFIRM, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2007-September/065902.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • secunia.com /advisories/23944 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • security.gentoo.org /glsa/glsa-200702-06.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /advisories/24129 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-102969-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/24048 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/1939 · vdb-entry, x_refsource_VUPEN, x_transferred
  • security.freebsd.org /advisories/FreeBSD-SA-07:02.bind.asc · vendor-advisory, x_refsource_FREEBSD, x_transferred
  • www2.itrc.hp.com /service/cki/docDisplay.do?docId=c00967144 · vendor-advisory, x_refsource_HP, x_transferred
  • openpkg.com /security/advisories/OpenPKG-SA-2007.007.html · vendor-advisory, x_refsource_OPENPKG, x_transferred
  • vupen.com /english/advisories/2007/3229 · vdb-entry, x_refsource_VUPEN, x_transferred
  • ftp.netbsd.org /pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc · vendor-advisory, x_refsource_NETBSD, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2007-125.htm · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/23943 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:030 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/25482 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2007-0057.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • trustix.org /errata/2007/0005 · vendor-advisory, x_refsource_TRUSTIX, x_transferred
  • debian.org /security/2007/dsa-1254 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • lists.apple.com /archives/security-announce/2007/May/msg00004.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • secunia.com /advisories/25402 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/31838 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/22231 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/24083 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25649 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2007-0044.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/24284 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24930 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • www-1.ibm.com /support/docview.wss?uid=isg1IY96144 · vendor-advisory, x_refsource_AIXAPAR, x_transferred
  • secunia.com /advisories/24648 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/2163 · vdb-entry, x_refsource_VUPEN, x_transferred
  • fedoranews.org /cms/node/2537 · vendor-advisory, x_refsource_FEDORA, x_transferred
  • secunia.com /advisories/25715 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/23977 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11523 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • marc.info /?l=bind-announce&m=116968519300764&w=2 · mailing-list, x_refsource_MLIST, x_transferred
  • isc.org /index.pl?/sw/bind/view/?release=9.2.8 · x_refsource_CONFIRM, x_transferred
  • fedoranews.org /cms/node/2507
  • lists.suse.com /archive/suse-security-announce/2007-Jan/0016.html
  • secunia.com /advisories/23904 · Patch, Vendor Advisory
  • secunia.com /advisories/23924 · Vendor Advisory
  • secunia.com /advisories/23972 · Vendor Advisory
  • secunia.com /advisories/23974 · Vendor Advisory
  • secunia.com /advisories/24014 · Vendor Advisory
  • secunia.com /advisories/24054 · Vendor Advisory
  • secunia.com /advisories/24203 · Vendor Advisory
  • secunia.com /advisories/24950 · Vendor Advisory
  • secunia.com /advisories/26909
  • secunia.com /advisories/27706
  • slackware.com /security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157
  • www-1.ibm.com /support/docview.wss?uid=isg1IY95618
  • www-1.ibm.com /support/docview.wss?uid=isg1IY95619

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.