CVE-2009-0696
NoneCVSS
—
EPSS
12.6%
Published
Jul 29, 2009
CISA due date
—
The record
The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | bind9 | 0 | 1:9.6.1.dfsg.P1-1 |
| Debian:11 | bind9 | 0 | 1:9.6.1.dfsg.P1-1 |
| Debian:12 | bind9 | 0 | 1:9.6.1.dfsg.P1-1 |
| Debian:13 | bind9 | 0 | 1:9.6.1.dfsg.P1-1 |
| Debian:4.0 | bind9 | 0 | 1:9.3.4-2etch5 |
| Debian:5.0 | bind9 | 0 | 1:9.5.1.dfsg.P3-1 |
| Red Hat:enterprise_linux:3::as | bind | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::as | bind-chroot | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::as | bind-debuginfo | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::as | bind-devel | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::as | bind-libs | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::as | bind-utils | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::desktop | bind | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-chroot | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-debuginfo | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-devel | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-libs | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::desktop | bind-utils | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::es | bind | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::es | bind-chroot | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::es | bind-debuginfo | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::es | bind-devel | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::es | bind-libs | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::es | bind-utils | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::ws | bind | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::ws | bind-chroot | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::ws | bind-debuginfo | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::ws | bind-devel | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::ws | bind-libs | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:3::ws | bind-utils | 0 | 20:9.2.4-25.el3 |
| Red Hat:enterprise_linux:4::as | bind | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::as | bind-chroot | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::as | bind-debuginfo | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::as | bind-devel | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::as | bind-libs | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::as | bind-utils | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::desktop | bind | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::desktop | bind-chroot | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::desktop | bind-debuginfo | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::desktop | bind-devel | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::desktop | bind-libs | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::desktop | bind-utils | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::es | bind | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::es | bind-chroot | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::es | bind-debuginfo | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::es | bind-devel | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::es | bind-libs | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::es | bind-utils | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::ws | bind | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::ws | bind-chroot | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::ws | bind-debuginfo | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::ws | bind-devel | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::ws | bind-libs | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:4::ws | bind-utils | 0 | 20:9.2.4-30.el4_8.4 |
| Red Hat:enterprise_linux:5::client | bind | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client | bind-chroot | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client | bind-debuginfo | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client | bind-devel | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client | bind-libbind-devel | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client | bind-libs | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client | bind-sdb | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client | bind-utils | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client | caching-nameserver | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-chroot | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-debuginfo | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-devel | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libbind-devel | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libs | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-sdb | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-utils | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::client_workstation | caching-nameserver | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | bind | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | bind-chroot | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | bind-debuginfo | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | bind-devel | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | bind-libbind-devel | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | bind-libs | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | bind-sdb | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | bind-utils | 0 | 30:9.3.4-10.P1.el5_3.3 |
| Red Hat:enterprise_linux:5::server | caching-nameserver | 0 | 30:9.3.4-10.P1.el5_3.3 |
| openSUSE:Tumbleweed | bind | 0 | 9.10.3P4-21.1 |
Related vulnerabilities
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind9
- CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can… Also affects bind9
- CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an… Also affects bind9
- CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an… Also affects bind9
- CVE-2016-6170 ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows… Also affects bind9
- CVE-2015-1349 named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when… Also affects bind9
- CVE-2012-1033 The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values… Also affects bind9
- CVE-2011-4313 query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through… Also affects bind9