2.6

CVE-2009-4022

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Bind Version 9.0
Isc ≫ Bind Version 9.0.0 Update rc1
Isc ≫ Bind Version 9.0.0 Update rc2
Isc ≫ Bind Version 9.0.0 Update rc3
Isc ≫ Bind Version 9.0.0 Update rc4
Isc ≫ Bind Version 9.0.0 Update rc5
Isc ≫ Bind Version 9.0.0 Update rc6
Isc ≫ Bind Version 9.0.1
Isc ≫ Bind Version 9.0.1 Update rc1
Isc ≫ Bind Version 9.0.1 Update rc2
Isc ≫ Bind Version 9.1
Isc ≫ Bind Version 9.1.0 Update rc1
Isc ≫ Bind Version 9.1.1
Isc ≫ Bind Version 9.1.1 Update rc1
Isc ≫ Bind Version 9.1.1 Update rc2
Isc ≫ Bind Version 9.1.1 Update rc3
Isc ≫ Bind Version 9.1.1 Update rc4
Isc ≫ Bind Version 9.1.1 Update rc5
Isc ≫ Bind Version 9.1.1 Update rc6
Isc ≫ Bind Version 9.1.1 Update rc7
Isc ≫ Bind Version 9.1.2
Isc ≫ Bind Version 9.1.2 Update rc1
Isc ≫ Bind Version 9.1.3
Isc ≫ Bind Version 9.1.3 Update rc1
Isc ≫ Bind Version 9.1.3 Update rc2
Isc ≫ Bind Version 9.1.3 Update rc3
Isc ≫ Bind Version 9.2
Isc ≫ Bind Version 9.2.0
Isc ≫ Bind Version 9.2.0 Update a1
Isc ≫ Bind Version 9.2.0 Update a2
Isc ≫ Bind Version 9.2.0 Update a3
Isc ≫ Bind Version 9.2.0 Update b1
Isc ≫ Bind Version 9.2.0 Update b2
Isc ≫ Bind Version 9.2.0 Update rc1
Isc ≫ Bind Version 9.2.0 Update rc10
Isc ≫ Bind Version 9.2.0 Update rc2
Isc ≫ Bind Version 9.2.0 Update rc3
Isc ≫ Bind Version 9.2.0 Update rc4
Isc ≫ Bind Version 9.2.0 Update rc5
Isc ≫ Bind Version 9.2.0 Update rc6
Isc ≫ Bind Version 9.2.0 Update rc7
Isc ≫ Bind Version 9.2.0 Update rc8
Isc ≫ Bind Version 9.2.0 Update rc9
Isc ≫ Bind Version 9.2.1
Isc ≫ Bind Version 9.2.1 Update rc1
Isc ≫ Bind Version 9.2.1 Update rc2
Isc ≫ Bind Version 9.2.2
Isc ≫ Bind Version 9.2.2 Update p2
Isc ≫ Bind Version 9.2.2 Update p3
Isc ≫ Bind Version 9.2.2 Update rc1
Isc ≫ Bind Version 9.2.3
Isc ≫ Bind Version 9.2.3 Update rc1
Isc ≫ Bind Version 9.2.3 Update rc2
Isc ≫ Bind Version 9.2.3 Update rc3
Isc ≫ Bind Version 9.2.3 Update rc4
Isc ≫ Bind Version 9.2.4
Isc ≫ Bind Version 9.2.4 Update rc2
Isc ≫ Bind Version 9.2.4 Update rc3
Isc ≫ Bind Version 9.2.4 Update rc4
Isc ≫ Bind Version 9.2.4 Update rc5
Isc ≫ Bind Version 9.2.4 Update rc6
Isc ≫ Bind Version 9.2.4 Update rc7
Isc ≫ Bind Version 9.2.4 Update rc8
Isc ≫ Bind Version 9.2.5
Isc ≫ Bind Version 9.2.5 Update b2
Isc ≫ Bind Version 9.2.5 Update rc1
Isc ≫ Bind Version 9.2.6
Isc ≫ Bind Version 9.2.6 Update rc1
Isc ≫ Bind Version 9.2.7
Isc ≫ Bind Version 9.2.7 Update rc1
Isc ≫ Bind Version 9.2.7 Update rc2
Isc ≫ Bind Version 9.2.7 Update rc3
Isc ≫ Bind Version 9.2.8
Isc ≫ Bind Version 9.2.9
Isc ≫ Bind Version 9.2.9 Update rc1
Isc ≫ Bind Version 9.3
Isc ≫ Bind Version 9.3.0
Isc ≫ Bind Version 9.3.0 Update b2
Isc ≫ Bind Version 9.3.0 Update b3
Isc ≫ Bind Version 9.3.0 Update b4
Isc ≫ Bind Version 9.3.0 Update rc1
Isc ≫ Bind Version 9.3.0 Update rc2
Isc ≫ Bind Version 9.3.0 Update rc3
Isc ≫ Bind Version 9.3.0 Update rc4
Isc ≫ Bind Version 9.3.1
Isc ≫ Bind Version 9.3.1 Update b2
Isc ≫ Bind Version 9.3.1 Update rc1
Isc ≫ Bind Version 9.3.2
Isc ≫ Bind Version 9.3.2 Update rc1
Isc ≫ Bind Version 9.3.3
Isc ≫ Bind Version 9.3.3 Update rc1
Isc ≫ Bind Version 9.3.3 Update rc2
Isc ≫ Bind Version 9.3.3 Update rc3
Isc ≫ Bind Version 9.3.4
Isc ≫ Bind Version 9.3.5
Isc ≫ Bind Version 9.3.5 Update rc1
Isc ≫ Bind Version 9.3.5 Update rc2
Isc ≫ Bind Version 9.3.6
Isc ≫ Bind Version 9.3.6 Update rc1
Isc ≫ Bind Version 9.4.0
Isc ≫ Bind Version 9.4.0 Update a1
Isc ≫ Bind Version 9.4.0 Update a2
Isc ≫ Bind Version 9.4.0 Update a3
Isc ≫ Bind Version 9.4.0 Update a4
Isc ≫ Bind Version 9.4.0 Update a5
Isc ≫ Bind Version 9.4.0 Update a6
Isc ≫ Bind Version 9.4.0 Update b1
Isc ≫ Bind Version 9.4.0 Update b2
Isc ≫ Bind Version 9.4.0 Update b3
Isc ≫ Bind Version 9.4.0 Update b4
Isc ≫ Bind Version 9.4.0 Update rc1
Isc ≫ Bind Version 9.4.0 Update rc2
Isc ≫ Bind Version 9.4.1
Isc ≫ Bind Version 9.4.2
Isc ≫ Bind Version 9.4.2 Update rc1
Isc ≫ Bind Version 9.4.2 Update rc2
Isc ≫ Bind Version 9.4.3
Isc ≫ Bind Version 9.4.3 Update b1
Isc ≫ Bind Version 9.4.3 Update b2
Isc ≫ Bind Version 9.4.3 Update b3
Isc ≫ Bind Version 9.4.3 Update p1
Isc ≫ Bind Version 9.4.3 Update p2
Isc ≫ Bind Version 9.4.3 Update p3
Isc ≫ Bind Version 9.4.3 Update rc1
Isc ≫ Bind Version 9.5.0
Isc ≫ Bind Version 9.5.0 Update a1
Isc ≫ Bind Version 9.5.0 Update a2
Isc ≫ Bind Version 9.5.0 Update a3
Isc ≫ Bind Version 9.5.0 Update a4
Isc ≫ Bind Version 9.5.0 Update a5
Isc ≫ Bind Version 9.5.0 Update a6
Isc ≫ Bind Version 9.5.0 Update a7
Isc ≫ Bind Version 9.5.0 Update b1
Isc ≫ Bind Version 9.5.0 Update b2
Isc ≫ Bind Version 9.5.0 Update b3
Isc ≫ Bind Version 9.5.0 Update p1
Isc ≫ Bind Version 9.5.0 Update p2
Isc ≫ Bind Version 9.5.0 Update p2_w1
Isc ≫ Bind Version 9.5.0 Update p2_w2
Isc ≫ Bind Version 9.5.0 Update rc1
Isc ≫ Bind Version 9.5.1
Isc ≫ Bind Version 9.5.1 Update b1
Isc ≫ Bind Version 9.5.1 Update b2
Isc ≫ Bind Version 9.5.1 Update b3
Isc ≫ Bind Version 9.5.1 Update rc1
Isc ≫ Bind Version 9.5.1 Update rc2
Isc ≫ Bind Version 9.5.2
Isc ≫ Bind Version 9.5.2 Update b1
Isc ≫ Bind Version 9.5.2 Update rc1
Isc ≫ Bind Version 9.6.0
Isc ≫ Bind Version 9.6.0 Update a1
Isc ≫ Bind Version 9.6.0 Update b1
Isc ≫ Bind Version 9.6.0 Update p1
Isc ≫ Bind Version 9.6.0 Update rc1
Isc ≫ Bind Version 9.6.0 Update rc2
Isc ≫ Bind Version 9.6.1
Isc ≫ Bind Version 9.6.1 Update b1
Isc ≫ Bind Version 9.6.1 Update p1
Isc ≫ Bind Version 9.6.1 Update rc1
Isc ≫ Bind Version 9.7.0
Isc ≫ Bind Version 9.7.0 Update a1
Isc ≫ Bind Version 9.7.0 Update a2
Isc ≫ Bind Version 9.7.0 Update a3
Isc ≫ Bind Version 9.7.0 Update b1
Isc ≫ Bind Version 9.7.0 Update b2
Isc ≫ Bind Version 9.7.0 Update b3
Isc ≫ Bind Version 9.7.0 Update p1
Isc ≫ Bind Version 9.7.0 Update rc1
Isc ≫ Bind Version 9.7.0 Update rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.95% 0.94
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018
http://www.vupen.com/english/advisories/2010/0622
Vendor Advisory
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
http://secunia.com/advisories/38794
Vendor Advisory
http://www.vupen.com/english/advisories/2010/0528
Vendor Advisory
http://secunia.com/advisories/38834
Vendor Advisory
ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt
http://secunia.com/advisories/39334
Vendor Advisory
http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://osvdb.org/60493
http://secunia.com/advisories/37426
Vendor Advisory
http://secunia.com/advisories/37491
Vendor Advisory
http://secunia.com/advisories/38219
Vendor Advisory
http://secunia.com/advisories/38240
Vendor Advisory
http://secunia.com/advisories/40730
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1
http://support.apple.com/kb/HT5002
http://www.ibm.com/support/docview.wss?uid=isg1IZ68597
http://www.ibm.com/support/docview.wss?uid=isg1IZ71667
http://www.ibm.com/support/docview.wss?uid=isg1IZ71774
http://www.kb.cert.org/vuls/id/418861
US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2009:304
http://www.openwall.com/lists/oss-security/2009/11/24/1
http://www.openwall.com/lists/oss-security/2009/11/24/2
http://www.openwall.com/lists/oss-security/2009/11/24/8
http://www.redhat.com/support/errata/RHSA-2009-1620.html
Vendor Advisory
http://www.securityfocus.com/bid/37118
http://www.ubuntu.com/usn/USN-888-1
http://www.vupen.com/english/advisories/2009/3335
Vendor Advisory
http://www.vupen.com/english/advisories/2010/0176
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=538744
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/54416
https://issues.rpath.com/browse/RPL-3152
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10821
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11745
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7261
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7459
https://www.isc.org/advisories/CVE-2009-4022v6
Vendor Advisory
https://www.isc.org/advisories/CVE2009-4022
Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01172.html
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01188.html