Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEA…

Exploit prediction (EPSS)

12.40% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-189 Numeric Errors

References

• secunia.com /advisories/28579 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• bugzilla.redhat.com /show_bug.cgi?id=429149 · x_refsource_CONFIRM, x_transferred
• redhat.com /support/errata/RHSA-2008-0300.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• securityfocus.com /bid/27283 · vdb-entry, x_refsource_BID, x_transferred
• secunia.com /advisories/30538 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/487000/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• kb.cert.org /vuls/id/203611 · third-party-advisory, x_refsource_CERT-VN, x_transferred
• security.freebsd.org /advisories/FreeBSD-SA-08:02.libc.asc · vendor-advisory, x_refsource_FREEBSD, x_transferred
• vupen.com /english/advisories/2008/0703 · vdb-entry, x_refsource_VUPEN, x_transferred
• support.avaya.com /elmodocs2/security/ASA-2008-244.htm · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2008/1743/references · vdb-entry, x_refsource_VUPEN, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• redhat.com /archives/fedora-package-announce/2008-January/msg00782.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• secunia.com /advisories/28429 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• issues.rpath.com /browse/RPL-2169 · x_refsource_CONFIRM, x_transferred
• securitytracker.com /id?1019189 · vdb-entry, x_refsource_SECTRACK, x_transferred
• lists.opensuse.org /opensuse-security-announce/2008-03/msg00004.html · vendor-advisory, x_refsource_SUSE, x_transferred
• www14.software.ibm.com /webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/2008022 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/28487 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• isc.org /index.pl?/sw/bind/bind-security.php · x_refsource_CONFIRM, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/39670 · vdb-entry, x_refsource_XF, x_transferred
• secunia.com /advisories/30313 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• www14.software.ibm.com /webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/30718 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• h20564.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/29323 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-26-238493-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• secunia.com /advisories/29161 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2008/0193 · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/28367 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• redhat.com /archives/fedora-package-announce/2008-January/msg00781.html · vendor-advisory, x_refsource_FEDORA, x_transferred

Sources

• CVE List: CVE-2008-0122
• NVD: CVE-2008-0122

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.