3 matches found
Denial Of Service (DoS)
ISC BIND is vulnerable to denial of service DoS. A flaw was found in the way BIND generates outbound DNS query ids. If an attacker is able to acquire a finite set of query IDs, it becomes possible to accurately predict future query IDs. Future query ID prediction may allow an attacker to conduct ...
4.3CVSS2.8AI score0.1309EPSS
SaveExploits1References71Affected Software1
ISC BIND < 8.4.7-P1 Outgoing Query Predictable DNS Query ID (deprecated)
Binary data 4195.prm...
4.3CVSS7.3AI score0.07585EPSS
SaveExploits2References2
CVE-2007-2926
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...
6.6AI score
SaveExploits0References67
20