CVE-2006-4095
High · 7.5CVSS
7.5
EPSS
11.8%
Published
Sep 6, 2006
CISA due date
—
The record
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | bind9 | 0 | 1:9.3.2-P1-1 |
| Debian:11 | bind9 | 0 | 1:9.3.2-P1-1 |
| Debian:12 | bind9 | 0 | 1:9.3.2-P1-1 |
| Debian:13 | bind9 | 0 | 1:9.3.2-P1-1 |
| Debian:14 | bind9 | 0 | 1:9.3.2-P1-1 |
| Debian:3.1 | bind9 | 0 | 1:9.2.4-1sarge1 |
Related vulnerabilities
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind9
- CVE-2016-6170 ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows… Also affects bind9
- CVE-2015-1349 named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when… Also affects bind9
- CVE-2012-1033 The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values… Also affects bind9
- CVE-2011-4313 query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through… Also affects bind9
- CVE-2011-2464 Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before… Also affects bind9
- CVE-2011-1910 Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV… Also affects bind9
- CVE-2009-0696 The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5… Also affects bind9