PT-2007-1954 · Isc+1 · Isc Bind+1

Mark Andrews · Published 2007-01-25 · Updated 2017-10-11 · CVE-2007-0494

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.0.x through 9.5.0a1

Description The issue allows remote attackers to cause a denial of service via a type * (ANY) DNS query response that contains multiple RRsets, triggering an assertion error.

Recommendations For versions 9.0.x through 9.5.0a1, update to a version that is not affected by this issue to prevent remote attackers from causing a denial of service.

Fix

DoS

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2007-0494

DSA-1254-1

HPSBUX02219

RHSA-2007:0044

RHSA-2007:0057

RHSA-2007_0044

RHSA-2007_0057

Affected Products

Isc Bind

Red Hat

References · 81

• http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2007/May/msg00004.html · Vendor Advisory
• http://fedoranews.org/cms/node/2537 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 · Vendor Advisory
• http://ubuntu.com/usn/usn-418-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0044.html · Vendor Advisory
• http://secunia.com/advisories/25402 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc · Vendor Advisory
• http://trustix.org/errata/2007/0005 · Vendor Advisory
• http://debian.org/security/2007/dsa-1254 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0494 · Security Note
• http://secunia.com/advisories/24930 · Vendor Advisory
• http://secunia.com/advisories/24014 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09530 · Security Note