CVE-2009-4022
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS…
Does this matter?
Lower severity and a low EPSS score (7.95%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
- CVSS 2.0
- 2.6 LOWAV:N/AC:H/Au:N/C:N/I:P/A:N
- EPSS
- 7.95% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- isc/bind
- Source
- secalert@redhat.com
References
- ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt
- http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc
- http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
- http://lists.vmware.com/pipermail/security-announce/2010/000082.html
- http://osvdb.org/60493
- http://secunia.com/advisories/37426Vendor Advisory
- http://secunia.com/advisories/37491Vendor Advisory
- http://secunia.com/advisories/38219Vendor Advisory
- http://secunia.com/advisories/38240Vendor Advisory
- http://secunia.com/advisories/38794Vendor Advisory
- http://secunia.com/advisories/38834Vendor Advisory
- http://secunia.com/advisories/39334Vendor Advisory
- http://secunia.com/advisories/40730Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1
- http://support.apple.com/kb/HT5002
- http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018
- http://www.ibm.com/support/docview.wss?uid=isg1IZ68597
- http://www.ibm.com/support/docview.wss?uid=isg1IZ71667
- http://www.ibm.com/support/docview.wss?uid=isg1IZ71774
- http://www.kb.cert.org/vuls/id/418861US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:304
- http://www.openwall.com/lists/oss-security/2009/11/24/1
- http://www.openwall.com/lists/oss-security/2009/11/24/2
- http://www.openwall.com/lists/oss-security/2009/11/24/8
- http://www.redhat.com/support/errata/RHSA-2009-1620.htmlVendor Advisory
- http://www.securityfocus.com/bid/37118
- http://www.ubuntu.com/usn/USN-888-1
- http://www.vupen.com/english/advisories/2009/3335Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0176Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.