CVE-2007-0494

BIND dnssec denial of service

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.

ISC BIND 9.0.x, 9.1.x, 9.2.0 hasta la versión 9.2.7, 9.3.0 hasta la versión 9.3.3, 9.4.0a1 hasta la versión 9.4.0a6, 9.4.0b1 hasta la versión 9.4.0b4, 9.4.0rc1 y 9.5.0a1 (solo Bind Forum) permite a atacantes remotos provocar una denegación de servicio (salida) a través de la respuesta a una consulta DNS tipo * (ANY) que contiene múltiples RRsets, lo que desencadena un error de aserción, también conocido como la vulnerabilidad "DNSSEC Validation".

Potential security vulnerabilities have been identified with the OpenVMS TCPIP Bind Services and OpenVMS TCPIP IPC Services for OpenVMS. These vulnerabilities could be exploited remotely resulting in execution of code with the privileges of Bind, disclosure of information, or cause a Denial of Service (DoS). Revision 1 of this advisory.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-01-25 CVE Reserved
2007-01-25 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-19: Data Processing Errors

CAPEC

References (68)

URL	Tag	Source
http://docs.info.apple.com/article.html?artnum=305530	X_refsource_confirm
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html	Mailing List
http://marc.info/?l=bind-announce&m=116968519300764&w=2	Mailing List
http://secunia.com/advisories/24284	Third Party Advisory
http://secunia.com/advisories/25482	Third Party Advisory
http://secunia.com/advisories/25649	Third Party Advisory
http://secunia.com/advisories/25715	Third Party Advisory
http://secunia.com/advisories/26909	Third Party Advisory
http://secunia.com/advisories/27706	Third Party Advisory
http://securitytracker.com/id?1017573	Vdb Entry
http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm	X_refsource_confirm
http://www.isc.org/index.pl?/sw/bind/bind-security.php	X_refsource_confirm
http://www.securityfocus.com/bid/22231	Vdb Entry
http://www.vupen.com/english/advisories/2007/1401	Vdb Entry
http://www.vupen.com/english/advisories/2007/1939	Vdb Entry
http://www.vupen.com/english/advisories/2007/2002	Vdb Entry
http://www.vupen.com/english/advisories/2007/2163	Vdb Entry
http://www.vupen.com/english/advisories/2007/2245	Vdb Entry
http://www.vupen.com/english/advisories/2007/2315	Vdb Entry
http://www.vupen.com/english/advisories/2007/3229	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/31838	Vdb Entry
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488	X_refsource_confirm
https://issues.rpath.com/browse/RPL-989	X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11523	Signature

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/23904	2017-10-11
http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8	2017-10-11
http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4	2017-10-11

URL	Date	SRC
ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	2017-10-11
http://fedoranews.org/cms/node/2507	2017-10-11
http://fedoranews.org/cms/node/2537	2017-10-11
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc	2017-10-11
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495	2017-10-11
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html	2017-10-11
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html	2017-10-11
http://secunia.com/advisories/23924	2017-10-11
http://secunia.com/advisories/23943	2017-10-11
http://secunia.com/advisories/23944	2017-10-11
http://secunia.com/advisories/23972	2017-10-11
http://secunia.com/advisories/23974	2017-10-11
http://secunia.com/advisories/23977	2017-10-11
http://secunia.com/advisories/24014	2017-10-11
http://secunia.com/advisories/24048	2017-10-11
http://secunia.com/advisories/24054	2017-10-11
http://secunia.com/advisories/24083	2017-10-11
http://secunia.com/advisories/24129	2017-10-11
http://secunia.com/advisories/24203	2017-10-11
http://secunia.com/advisories/24648	2017-10-11
http://secunia.com/advisories/24930	2017-10-11
http://secunia.com/advisories/24950	2017-10-11
http://secunia.com/advisories/25402	2017-10-11
http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc	2017-10-11
http://security.gentoo.org/glsa/glsa-200702-06.xml	2017-10-11
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157	2017-10-11
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102969-1	2017-10-11
http://www-1.ibm.com/support/docview.wss?uid=isg1IY95618	2017-10-11
http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619	2017-10-11
http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144	2017-10-11
http://www-1.ibm.com/support/docview.wss?uid=isg1IY96324	2017-10-11
http://www.debian.org/security/2007/dsa-1254	2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2007:030	2017-10-11
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2007-0044.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2007-0057.html	2017-10-11
http://www.trustix.org/errata/2007/0005	2017-10-11
http://www.ubuntu.com/usn/usn-418-1	2017-10-11
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144	2017-10-11
https://access.redhat.com/security/cve/CVE-2007-0494	2007-03-14
https://bugzilla.redhat.com/show_bug.cgi?id=225268	2007-03-14

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0 Search vendor "Isc" for product "Bind" and version "9.0"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.0 Search vendor "Isc" for product "Bind" and version "9.0.0"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.0 Search vendor "Isc" for product "Bind" and version "9.0.0"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.0 Search vendor "Isc" for product "Bind" and version "9.0.0"		rc3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.0 Search vendor "Isc" for product "Bind" and version "9.0.0"		rc4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.0 Search vendor "Isc" for product "Bind" and version "9.0.0"		rc5		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.0 Search vendor "Isc" for product "Bind" and version "9.0.0"		rc6		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.1 Search vendor "Isc" for product "Bind" and version "9.0.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.1 Search vendor "Isc" for product "Bind" and version "9.0.1"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.0.1 Search vendor "Isc" for product "Bind" and version "9.0.1"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1 Search vendor "Isc" for product "Bind" and version "9.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.0 Search vendor "Isc" for product "Bind" and version "9.1.0"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.1 Search vendor "Isc" for product "Bind" and version "9.1.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.1 Search vendor "Isc" for product "Bind" and version "9.1.1"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.1 Search vendor "Isc" for product "Bind" and version "9.1.1"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.1 Search vendor "Isc" for product "Bind" and version "9.1.1"		rc3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.1 Search vendor "Isc" for product "Bind" and version "9.1.1"		rc4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.1 Search vendor "Isc" for product "Bind" and version "9.1.1"		rc5		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.1 Search vendor "Isc" for product "Bind" and version "9.1.1"		rc6		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.1 Search vendor "Isc" for product "Bind" and version "9.1.1"		rc7		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.2 Search vendor "Isc" for product "Bind" and version "9.1.2"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.2 Search vendor "Isc" for product "Bind" and version "9.1.2"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.3 Search vendor "Isc" for product "Bind" and version "9.1.3"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.3 Search vendor "Isc" for product "Bind" and version "9.1.3"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.3 Search vendor "Isc" for product "Bind" and version "9.1.3"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.1.3 Search vendor "Isc" for product "Bind" and version "9.1.3"		rc3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2 Search vendor "Isc" for product "Bind" and version "9.2"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		a1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		a2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		a3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc10		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc5		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc6		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc7		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc8		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.0 Search vendor "Isc" for product "Bind" and version "9.2.0"		rc9		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.1 Search vendor "Isc" for product "Bind" and version "9.2.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.1 Search vendor "Isc" for product "Bind" and version "9.2.1"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.1 Search vendor "Isc" for product "Bind" and version "9.2.1"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.2 Search vendor "Isc" for product "Bind" and version "9.2.2"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.2 Search vendor "Isc" for product "Bind" and version "9.2.2"		p2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.2 Search vendor "Isc" for product "Bind" and version "9.2.2"		p3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.2 Search vendor "Isc" for product "Bind" and version "9.2.2"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.3 Search vendor "Isc" for product "Bind" and version "9.2.3"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.3 Search vendor "Isc" for product "Bind" and version "9.2.3"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.3 Search vendor "Isc" for product "Bind" and version "9.2.3"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.3 Search vendor "Isc" for product "Bind" and version "9.2.3"		rc3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.3 Search vendor "Isc" for product "Bind" and version "9.2.3"		rc4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.4 Search vendor "Isc" for product "Bind" and version "9.2.4"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.4 Search vendor "Isc" for product "Bind" and version "9.2.4"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.4 Search vendor "Isc" for product "Bind" and version "9.2.4"		rc3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.4 Search vendor "Isc" for product "Bind" and version "9.2.4"		rc4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.4 Search vendor "Isc" for product "Bind" and version "9.2.4"		rc5		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.4 Search vendor "Isc" for product "Bind" and version "9.2.4"		rc6		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.4 Search vendor "Isc" for product "Bind" and version "9.2.4"		rc7		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.4 Search vendor "Isc" for product "Bind" and version "9.2.4"		rc8		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.5 Search vendor "Isc" for product "Bind" and version "9.2.5"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.5 Search vendor "Isc" for product "Bind" and version "9.2.5"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.5 Search vendor "Isc" for product "Bind" and version "9.2.5"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.6 Search vendor "Isc" for product "Bind" and version "9.2.6"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.2.6 Search vendor "Isc" for product "Bind" and version "9.2.6"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3 Search vendor "Isc" for product "Bind" and version "9.3"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.0 Search vendor "Isc" for product "Bind" and version "9.3.0"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.0 Search vendor "Isc" for product "Bind" and version "9.3.0"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.0 Search vendor "Isc" for product "Bind" and version "9.3.0"		b3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.0 Search vendor "Isc" for product "Bind" and version "9.3.0"		b4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.0 Search vendor "Isc" for product "Bind" and version "9.3.0"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.0 Search vendor "Isc" for product "Bind" and version "9.3.0"		rc2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.0 Search vendor "Isc" for product "Bind" and version "9.3.0"		rc3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.0 Search vendor "Isc" for product "Bind" and version "9.3.0"		rc4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.1 Search vendor "Isc" for product "Bind" and version "9.3.1"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.1 Search vendor "Isc" for product "Bind" and version "9.3.1"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.1 Search vendor "Isc" for product "Bind" and version "9.3.1"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.2 Search vendor "Isc" for product "Bind" and version "9.3.2"		-		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.3.2 Search vendor "Isc" for product "Bind" and version "9.3.2"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		a1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		a2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		a3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		a4		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		a5		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		b1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		b2		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		b3		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.4.0 Search vendor "Isc" for product "Bind" and version "9.4.0"		rc1		Affected
Isc Search vendor "Isc"		Bind Search vendor "Isc" for product "Bind"				9.5.0 Search vendor "Isc" for product "Bind" and version "9.5.0"		a1		Affected