CVE-2009-0696: Medium severity ISC BIND vulnerability

Published Jul 29, 2009

Updated

The dnsdbfindrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.

Affected Software

65 affected components

ISC BIND=9.5.0-a6

ISC BIND=9.4.3-b1

ISC BIND=9.4.3-b2

ISC BIND=9.6-r6_rc1

ISC BIND=9.4.0-b2

ISC BIND=9.5.0-p2_w1

ISC BIND=9.5.0-a3

ISC BIND=9.5

ISC BIND=9.6.1

ISC BIND=9.4.0-a4

ISC BIND=9.6-r3

ISC BIND=9.5.0-p1

ISC BIND=9.4.3-p2

ISC BIND=9.4.1

ISC BIND=9.6-r6_b1

ISC BIND=9.4.0-a3

ISC BIND=9.5.0-a1

ISC BIND=9.5.0-b1

ISC BIND=9.5.0-a7

ISC BIND=9.4.0-rc2

ISC BIND=9.5.0-a2

ISC BIND=9.6.0-p1

ISC BIND=9.5.0-a4

ISC BIND=9.5.0-a5

ISC BIND=9.5.0-p2_w2

ISC BIND=9.6

ISC BIND=9.6-r6

ISC BIND=9.4

ISC BIND=9.6-r9_p1

ISC BIND=9.6-r5_b1

ISC BIND=9.6-r2

ISC BIND=9.5.0

ISC BIND=9.6-r9

ISC BIND=9.6-r1

ISC BIND=9.6-r7_p2

ISC BIND=9.4.2

ISC BIND=9.4.0-a2

ISC BIND=9.4.3-b3

ISC BIND=9.6.1-b1

ISC BIND=9.4.2-rc1

ISC BIND=9.4.0-b4

ISC BIND=9.4.0-b3

ISC BIND=9.6-r6_rc2

ISC BIND=9.6-r7_p1

ISC BIND=9.6.0-rc2

ISC BIND=9.4.3

ISC BIND=9.6-r5

ISC BIND=9.5.0-p2

ISC BIND=9.4.0-a1

ISC BIND=9.6-r4_p1

ISC BIND=9.4.0-a5

ISC BIND=9.6-r7

ISC BIND=9.6-r5_p1

ISC BIND=9.5.0-b3

ISC BIND=9.4.0-rc1

ISC BIND=9.4.0

ISC BIND=9.5.0-b2

ISC BIND=9.6.0-rc1

ISC BIND=9.6.0-a1

ISC BIND=9.4.0-a6

ISC BIND=9.4.0-b1

ISC BIND=9.4.2-rc2

ISC BIND=9.6-r4

ISC BIND=9.6.0-b1

ISC BIND=9.6.0

Remediation

Patch Available

https://www.isc.org/node/474

Event History

Jul 29, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:30 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0696?

CVE-2009-0696 has a severity of medium, causing denial of service on affected BIND versions.

How do I fix CVE-2009-0696?

To fix CVE-2009-0696, upgrade to ISC BIND versions 9.4.3-P3, 9.5.1-P3, or 9.6.1-P1 or later.

What versions of BIND are affected by CVE-2009-0696?

CVE-2009-0696 affects ISC BIND versions prior to 9.4.3-P3, 9.5.1-P3, and 9.6.1-P1.

What kind of attack does CVE-2009-0696 enable?

CVE-2009-0696 enables remote attackers to cause a denial of service via an ANY record in the prerequisite section.

Is my BIND installation vulnerable to CVE-2009-0696?

If you are running BIND versions earlier than 9.4.3-P3, 9.5.1-P3, or 9.6.1-P1, your installation is vulnerable.