PT-2009-6689 · Isc+2 · Libisc45+7

Micha Krause · Published 1970-01-01 · Updated 2025-12-23 · CVE-2009-0696

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND versions prior to 9.4.3-P3 ISC BIND versions prior to 9.5.1-P3 ISC BIND versions prior to 9.6.1-P1 liblwres40 (affected versions not specified) libisccfg40 (affected versions not specified) libisc45 (affected versions not specified) libisccc40 (affected versions not specified) libdns45 (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the ISC BIND software and various Debian GNU/Linux packages, which can lead to a denial of service. The vulnerabilities can be exploited remotely. Specifically, the dns db findrdataset function in db.c in named in ISC BIND, when configured as a master server, allows remote attackers to cause a denial of service via an ANY record in the prerequisite section of a crafted dynamic update message. This type of attack has been exploited in the wild.

Recommendations For ISC BIND versions prior to 9.4.3-P3, update to version 9.4.3-P3 or later. For ISC BIND versions prior to 9.5.1-P3, update to version 9.5.1-P3 or later. For ISC BIND versions prior to 9.6.1-P1, update to version 9.6.1-P1 or later. For liblwres40, libisccfg40, libisc45, libisccc40, and libdns45, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-16

Related Identifiers

BDU:2015-02832

BDU:2015-02833

BDU:2015-02834

BDU:2015-02835

BDU:2015-02836

CVE-2009-0696

DSA-1847-1

OPENSUSE-SU-2024:10467-1

RHSA-2009:1179

RHSA-2009:1180

RHSA-2009:1181

RHSA-2009_1179

RHSA-2009_1180

Affected Products

Debian

Isc Bind

Red Hat

Libdns45

Libisc45

Libisccc40

Libisccfg40

Liblwres40

References · 88

• 🔥 https://exploit-db.com/exploits/9300 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2009-0696 · Vendor Advisory
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc · Vendor Advisory
• http://openbsd.org/errata44.html#014_bind · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-0696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0696 · Security Note
• https://bdu.fstec.ru/vul/2015-02832 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0696 · Security Note
• https://isc.org/node/474 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02836 · Security Note
• https://bdu.fstec.ru/vul/2015-02833 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10467-1 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0696 · Vendor Advisory