CVE-2007-0494

Published: Jan 25, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.

Affected (92)

Products: Isc: Bind

Isc

1 product

Bind

Configuration A

92 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.0.0 rc1
Isc Bind	Version 9.0.0 rc2
Isc Bind	Version 9.0.0 rc3
Isc Bind	Version 9.0.0 rc4
Isc Bind	Version 9.0.0 rc5
Isc Bind	Version 9.0.0 rc6
Isc Bind	Version 9.0.1
Isc Bind	Version 9.0.1 rc1
Isc Bind	Version 9.0.1 rc2
Isc Bind	Version 9.0
Isc Bind	Version 9.1.0 rc1
Isc Bind	Version 9.1.1
Isc Bind	Version 9.1.1 rc1
Isc Bind	Version 9.1.1 rc2
Isc Bind	Version 9.1.1 rc3
Isc Bind	Version 9.1.1 rc4
Isc Bind	Version 9.1.1 rc5
Isc Bind	Version 9.1.1 rc6
Isc Bind	Version 9.1.1 rc7
Isc Bind	Version 9.1.2
Isc Bind	Version 9.1.2 rc1
Isc Bind	Version 9.1.3
Isc Bind	Version 9.1.3 rc1
Isc Bind	Version 9.1.3 rc2
Isc Bind	Version 9.1.3 rc3
Isc Bind	Version 9.1
Isc Bind	Version 9.2.0
Isc Bind	Version 9.2.0 a1
Isc Bind	Version 9.2.0 a2
Isc Bind	Version 9.2.0 a3
Isc Bind	Version 9.2.0 b1
Isc Bind	Version 9.2.0 b2
Isc Bind	Version 9.2.0 rc10
Isc Bind	Version 9.2.0 rc1
Isc Bind	Version 9.2.0 rc2
Isc Bind	Version 9.2.0 rc3
Isc Bind	Version 9.2.0 rc4
Isc Bind	Version 9.2.0 rc5
Isc Bind	Version 9.2.0 rc6
Isc Bind	Version 9.2.0 rc7
Isc Bind	Version 9.2.0 rc8
Isc Bind	Version 9.2.0 rc9
Isc Bind	Version 9.2.1
Isc Bind	Version 9.2.1 rc1
Isc Bind	Version 9.2.1 rc2
Isc Bind	Version 9.2.2
Isc Bind	Version 9.2.2 p2
Isc Bind	Version 9.2.2 p3
Isc Bind	Version 9.2.2 rc1
Isc Bind	Version 9.2.3
Isc Bind	Version 9.2.3 rc1
Isc Bind	Version 9.2.3 rc2
Isc Bind	Version 9.2.3 rc3
Isc Bind	Version 9.2.3 rc4
Isc Bind	Version 9.2.4
Isc Bind	Version 9.2.4 rc2
Isc Bind	Version 9.2.4 rc3
Isc Bind	Version 9.2.4 rc4
Isc Bind	Version 9.2.4 rc5
Isc Bind	Version 9.2.4 rc6
Isc Bind	Version 9.2.4 rc7
Isc Bind	Version 9.2.4 rc8
Isc Bind	Version 9.2.5
Isc Bind	Version 9.2.5 b2
Isc Bind	Version 9.2.5 rc1
Isc Bind	Version 9.2.6
Isc Bind	Version 9.2.6 rc1
Isc Bind	Version 9.2
Isc Bind	Version 9.3.0
Isc Bind	Version 9.3.0 b2
Isc Bind	Version 9.3.0 b3
Isc Bind	Version 9.3.0 b4
Isc Bind	Version 9.3.0 rc1
Isc Bind	Version 9.3.0 rc2
Isc Bind	Version 9.3.0 rc3
Isc Bind	Version 9.3.0 rc4
Isc Bind	Version 9.3.1
Isc Bind	Version 9.3.1 b2
Isc Bind	Version 9.3.1 rc1
Isc Bind	Version 9.3.2
Isc Bind	Version 9.3.2 rc1
Isc Bind	Version 9.3
Isc Bind	Version 9.4.0 a1
Isc Bind	Version 9.4.0 a2
Isc Bind	Version 9.4.0 a3
Isc Bind	Version 9.4.0 a4
Isc Bind	Version 9.4.0 a5
Isc Bind	Version 9.4.0 b1
Isc Bind	Version 9.4.0 b2
Isc Bind	Version 9.4.0 b3
Isc Bind	Version 9.4.0 rc1
Isc Bind	Version 9.5.0 a1

Related CWEs

CWE-19

References (132)

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=305530

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2507

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2537

Source: secalert@redhat.com

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2007/May/msg00004.html

Source: secalert@redhat.com

http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html

Source: secalert@redhat.com

http://marc.info/?l=bind-announce&m=116968519300764&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/23904

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/23924

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23943

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23944

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23972

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23974

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23977

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24014

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24048

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24054

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24083

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24129

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24203

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24284

Source: secalert@redhat.com

http://secunia.com/advisories/24648

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24930

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24950

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25402

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25482

Source: secalert@redhat.com

http://secunia.com/advisories/25649

Source: secalert@redhat.com

http://secunia.com/advisories/25715

Source: secalert@redhat.com

http://secunia.com/advisories/26909

Source: secalert@redhat.com

http://secunia.com/advisories/27706

Source: secalert@redhat.com

http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200702-06.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1017573

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102969-1

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm

Source: secalert@redhat.com

http://www-1.ibm.com/support/docview.wss?uid=isg1IY95618

Source: secalert@redhat.com

http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619

Source: secalert@redhat.com

http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144

Source: secalert@redhat.com

http://www-1.ibm.com/support/docview.wss?uid=isg1IY96324

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1254

Source: secalert@redhat.com

http://www.isc.org/index.pl?/sw/bind/bind-security.php

Source: secalert@redhat.com

http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8

Source: secalert@redhat.com

Patch

http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4

Source: secalert@redhat.com

Patch

http://www.mandriva.com/security/advisories?name=MDKSA-2007:030

Source: secalert@redhat.com

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0044.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0057.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/22231

Source: secalert@redhat.com

http://www.trustix.org/errata/2007/0005

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-418-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1401

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1939

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2002

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2163

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2245

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2315

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3229

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/31838

Source: secalert@redhat.com

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-989

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11523

Source: secalert@redhat.com

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)