PT-2009-6205 · Isc+2 · Isc Bind+2

Michael Sinatra · Published 2009-11-25 · Updated 2024-06-15 · CVE-2009-4022

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.0.x through 9.3.x ISC BIND 9.4 before 9.4.3-P4 ISC BIND 9.5 before 9.5.2-P1 ISC BIND 9.6 before 9.6.1-P2 ISC BIND 9.7 beta before 9.7.0b3

Description The issue allows remote attackers to conduct DNS cache poisoning attacks by sending a response that contains an Additional section with crafted data. This occurs when DNSSEC validation is enabled and checking is disabled, and the response is processed at the same time as requesting DNSSEC records.

Recommendations For ISC BIND versions 9.0.x through 9.3.x, update to a version outside of this range to mitigate the risk. For ISC BIND 9.4 before 9.4.3-P4, update to version 9.4.3-P4 or later. For ISC BIND 9.5 before 9.5.2-P1, update to version 9.5.2-P1 or later. For ISC BIND 9.6 before 9.6.1-P2, update to version 9.6.1-P2 or later. For ISC BIND 9.7 beta before 9.7.0b3, update to version 9.7.0b3 or later.

Fix

Related Identifiers

CVE-2009-4022

DSA-1961-1

OPENSUSE-SU-2024:10467-1

RHSA-2009:1620

RHSA-2009_1620

Affected Products

Bind Server

Isc Bind

Red Hat

References · 89

• http://mandriva.com/security/advisories?name=MDVSA-2009:304 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-November/msg01188.html · Vendor Advisory
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/3335 · Vendor Advisory
• http://secunia.com/advisories/39334 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-4022 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10467-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-4022 · Vendor Advisory
• http://secunia.com/advisories/37426 · Vendor Advisory
• http://secunia.com/advisories/40730 · Vendor Advisory
• https://isc.org/advisories/CVE2009-4022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4022 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-November/msg01172.html · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IZ68597 · Vendor Advisory
• http://vupen.com/english/advisories/2010/0176 · Vendor Advisory