CVE-2006-4096

Published: Sep 6, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.

Affected (11)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.2.0
Isc Bind	Version 9.2.1
Isc Bind	Version 9.2.2
Isc Bind	Version 9.2.3
Isc Bind	Version 9.2.4
Isc Bind	Version 9.2.5
Isc Bind	Version 9.2.6
Isc Bind	Version 9.3.0
Isc Bind	Version 9.3.1
Isc Bind	Version 9.3.2
Isc Bind	Version 9.3

References (82)

http://docs.info.apple.com/article.html?artnum=305530

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2007/May/msg00004.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=141879471518471&w=2

Source: cve@mitre.org

http://secunia.com/advisories/21752

Source: cve@mitre.org

http://secunia.com/advisories/21786

Source: cve@mitre.org

http://secunia.com/advisories/21790

Source: cve@mitre.org

http://secunia.com/advisories/21816

Source: cve@mitre.org

http://secunia.com/advisories/21818

Source: cve@mitre.org

http://secunia.com/advisories/21828

Source: cve@mitre.org

http://secunia.com/advisories/21835

Source: cve@mitre.org

http://secunia.com/advisories/21838

Source: cve@mitre.org

http://secunia.com/advisories/21912

Source: cve@mitre.org

http://secunia.com/advisories/21926

Source: cve@mitre.org

http://secunia.com/advisories/22298

Source: cve@mitre.org

http://secunia.com/advisories/24950

Source: cve@mitre.org

http://secunia.com/advisories/25402

Source: cve@mitre.org

http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200609-11.xml

Source: cve@mitre.org

http://securitytracker.com/id?1016794

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/697164

Source: cve@mitre.org

PatchUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:163

Source: cve@mitre.org

http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en

Source: cve@mitre.org

Patch

http://www.novell.com/linux/security/advisories/2006_23_sr.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_24_sr.html

Source: cve@mitre.org

http://www.openbsd.org/errata.html

Source: cve@mitre.org

http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/445600/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19859

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-343-1

Source: cve@mitre.org

http://www.us.debian.org/security/2006/dsa-1172

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3473

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3511

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1401

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1939

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28744

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-626

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623

Source: cve@mitre.org

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=305530