PT-2007-3577 · Isc+1 · Isc Bind+1

Mark Andrews · Published 2007-05-02 · Updated 2018-10-30 · CVE-2007-2241

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.4.0, and 9.5.0a1 through 9.5.0a3

Description The issue is related to an unspecified vulnerability in the query.c file of ISC BIND. When recursion is enabled, remote attackers can cause a denial of service by sending a sequence of queries that are processed by the query addsoa function, leading to the daemon exiting.

Recommendations For ISC BIND version 9.4.0, update to a version that fixes this issue. For ISC BIND versions 9.5.0a1 through 9.5.0a3, update to a version that fixes this issue. As a temporary workaround, consider disabling recursion to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-2241

Affected Products

Bind Server

Isc Bind

References · 15

• https://osv.dev/vulnerability/CVE-2007-2241 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2241 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:100 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-2241 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-2241 · Vendor Advisory
• http://secunia.com/advisories/25070 · Vendor Advisory
• http://isc.org/sw/bind/bind-security.php · Note
• http://kb.cert.org/vuls/id/718460 · Note
• http://securitytracker.com/id?1017985 · Note
• http://securityfocus.com/bid/23738 · Note
• http://isc.org/index.pl?/sw/bind/bind-security.php · Note
• http://vupen.com/english/advisories/2007/1593 · Note
• http://osvdb.org/34748 · Note
• http://securitylab.ru/vulnerability/295257.php · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33988 · Note