CVE-2007-2926
NoneCVSS
—
EPSS
13.1%
Published
Jul 24, 2007
CISA due date
—
The record
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | bind9 | 0 | 1:9.4.1-P1-1 |
| Debian:12 | bind9 | 0 | 1:9.4.1-P1-1 |
| Debian:13 | bind9 | 0 | 1:9.4.1-P1-1 |
| Debian:3.1 | bind9 | 0 | 1:9.2.4-1sarge3 |
| Debian:4.0 | bind9 | 0 | 1:9.3.4-2etch1 |
| Red Hat:enterprise_linux:2.1::as | bind | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::as | bind-devel | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::as | bind-utils | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::aw | bind | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::aw | bind-devel | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::aw | bind-utils | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::es | bind | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::es | bind-devel | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::es | bind-utils | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::ws | bind | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::ws | bind-devel | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:2.1::ws | bind-utils | 0 | 0:9.2.1-9.el2 |
| Red Hat:enterprise_linux:3::as | bind | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::as | bind-chroot | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::as | bind-debuginfo | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::as | bind-devel | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::as | bind-libs | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::as | bind-utils | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::desktop | bind | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-chroot | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-debuginfo | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-devel | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-libs | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-utils | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::es | bind | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::es | bind-chroot | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::es | bind-debuginfo | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::es | bind-devel | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::es | bind-libs | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::es | bind-utils | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::ws | bind | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::ws | bind-chroot | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::ws | bind-debuginfo | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::ws | bind-devel | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::ws | bind-libs | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:3::ws | bind-utils | 0 | 20:9.2.4-21.el3 |
| Red Hat:enterprise_linux:4::as | bind | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::as | bind-chroot | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::as | bind-debuginfo | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::as | bind-devel | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::as | bind-libs | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::as | bind-utils | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | bind | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | bind-chroot | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | bind-debuginfo | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | bind-devel | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | bind-libs | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | bind-utils | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::es | bind | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::es | bind-chroot | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::es | bind-debuginfo | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::es | bind-devel | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::es | bind-libs | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::es | bind-utils | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::ws | bind | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::ws | bind-chroot | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::ws | bind-debuginfo | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::ws | bind-devel | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::ws | bind-libs | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:4::ws | bind-utils | 0 | 20:9.2.4-27.0.1.el4 |
| Red Hat:enterprise_linux:5::client | bind | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client | bind-chroot | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client | bind-debuginfo | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client | bind-devel | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client | bind-libbind-devel | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client | bind-libs | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client | bind-sdb | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client | bind-utils | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client | caching-nameserver | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-chroot | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-debuginfo | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-devel | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libbind-devel | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libs | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-sdb | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-utils | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | caching-nameserver | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | bind | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | bind-chroot | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | bind-debuginfo | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | bind-devel | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | bind-libbind-devel | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | bind-libs | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | bind-sdb | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | bind-utils | 0 | 30:9.3.3-9.0.1.el5 |
| Red Hat:enterprise_linux:5::server | caching-nameserver | 0 | 30:9.3.3-9.0.1.el5 |
| openSUSE:Tumbleweed | bind | 0 | 9.16.20-1.4 |
Related vulnerabilities
- CVE-2025-40775 When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND… Also affects bind9
- CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate responses… Also affects bind9
- CVE-2024-12705 Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by… Also affects bind9
- CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local… Also affects bind9
- CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for… Also affects bind9
- CVE-2024-1975 If a server hosts a zone containing a "KEY" Resource Record, or a resolver… Also affects bind9
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind9
- CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can… Also affects bind9