CVE-2007-0494

2007-01-2500:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.97 High

EPSS

Percentile

99.7%

JSON

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to
9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only)
allows remote attackers to cause a denial of service (exit) via a type *
(ANY) DNS query response that contains multiple RRsets, which triggers an
assertion error, aka the “DNSSEC Validation” vulnerability.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchbind9< 9.3.2-2ubuntu1.3UNKNOWN
ubuntu6.10noarchbind9< 9.3.2-2ubuntu3.2UNKNOWN
ubuntu7.04noarchbind9< 9.3.4-2ubuntu2.1UNKNOWN