CVE - CVE-2007-0494

CVE-ID
CVE-2007-0494	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
AIXAPAR:IY95618 URL:http://www-1.ibm.com/support/docview.wss?uid=isg1IY95618 AIXAPAR:IY95619 URL:http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619 AIXAPAR:IY96144 URL:http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144 AIXAPAR:IY96324 URL:http://www-1.ibm.com/support/docview.wss?uid=isg1IY96324 APPLE:APPLE-SA-2007-05-24 URL:http://lists.apple.com/archives/security-announce/2007/May/msg00004.html BID:22231 URL:http://www.securityfocus.com/bid/22231 CONFIRM:http://docs.info.apple.com/article.html?artnum=305530 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm CONFIRM:http://www.isc.org/index.pl?/sw/bind/bind-security.php CONFIRM:http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8 CONFIRM:http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4 CONFIRM:https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 CONFIRM:https://issues.rpath.com/browse/RPL-989 DEBIAN:DSA-1254 URL:http://www.debian.org/security/2007/dsa-1254 FEDORA:FEDORA-2007-147 URL:http://fedoranews.org/cms/node/2507 FEDORA:FEDORA-2007-164 URL:http://fedoranews.org/cms/node/2537 FREEBSD:FreeBSD-SA-07:02 URL:http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc FULLDISC:20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html GENTOO:GLSA-200702-06 URL:http://security.gentoo.org/glsa/glsa-200702-06.xml HP:HPSBTU02207 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HP:HPSBUX02219 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 HP:SSRT061213 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HP:SSRT061239 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 HP:SSRT061273 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 HP:SSRT071304 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 MANDRIVA:MDKSA-2007:030 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:030 MLIST:[bind-announce] 20070125 Internet Systems Consortium Security Advisory. URL:http://marc.info/?l=bind-announce&m=116968519300764&w=2 NETBSD:NetBSD-SA2007-003 URL:http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc OPENPKG:OpenPKG-SA-2007.007 URL:http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html OVAL:oval:org.mitre.oval:def:11523 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11523 REDHAT:RHSA-2007:0044 URL:http://www.redhat.com/support/errata/RHSA-2007-0044.html REDHAT:RHSA-2007:0057 URL:http://www.redhat.com/support/errata/RHSA-2007-0057.html SECTRACK:1017573 URL:http://securitytracker.com/id?1017573 SECUNIA:23904 URL:http://secunia.com/advisories/23904 SECUNIA:23924 URL:http://secunia.com/advisories/23924 SECUNIA:23943 URL:http://secunia.com/advisories/23943 SECUNIA:23944 URL:http://secunia.com/advisories/23944 SECUNIA:23972 URL:http://secunia.com/advisories/23972 SECUNIA:23974 URL:http://secunia.com/advisories/23974 SECUNIA:23977 URL:http://secunia.com/advisories/23977 SECUNIA:24014 URL:http://secunia.com/advisories/24014 SECUNIA:24048 URL:http://secunia.com/advisories/24048 SECUNIA:24054 URL:http://secunia.com/advisories/24054 SECUNIA:24083 URL:http://secunia.com/advisories/24083 SECUNIA:24129 URL:http://secunia.com/advisories/24129 SECUNIA:24203 URL:http://secunia.com/advisories/24203 SECUNIA:24284 URL:http://secunia.com/advisories/24284 SECUNIA:24648 URL:http://secunia.com/advisories/24648 SECUNIA:24930 URL:http://secunia.com/advisories/24930 SECUNIA:24950 URL:http://secunia.com/advisories/24950 SECUNIA:25402 URL:http://secunia.com/advisories/25402 SECUNIA:25482 URL:http://secunia.com/advisories/25482 SECUNIA:25649 URL:http://secunia.com/advisories/25649 SECUNIA:25715 URL:http://secunia.com/advisories/25715 SECUNIA:26909 URL:http://secunia.com/advisories/26909 SECUNIA:27706 URL:http://secunia.com/advisories/27706 SGI:20070201-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc SLACKWARE:SSA:2007-026-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157 SUNALERT:102969 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102969-1 SUSE:SUSE-SA:2007:014 URL:http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html TRUSTIX:2007-0005 URL:http://www.trustix.org/errata/2007/0005 UBUNTU:USN-418-1 URL:http://www.ubuntu.com/usn/usn-418-1 VUPEN:ADV-2007-1401 URL:http://www.vupen.com/english/advisories/2007/1401 VUPEN:ADV-2007-1939 URL:http://www.vupen.com/english/advisories/2007/1939 VUPEN:ADV-2007-2002 URL:http://www.vupen.com/english/advisories/2007/2002 VUPEN:ADV-2007-2163 URL:http://www.vupen.com/english/advisories/2007/2163 VUPEN:ADV-2007-2245 URL:http://www.vupen.com/english/advisories/2007/2245 VUPEN:ADV-2007-2315 URL:http://www.vupen.com/english/advisories/2007/2315 VUPEN:ADV-2007-3229 URL:http://www.vupen.com/english/advisories/2007/3229 XF:bind-rrsets-dos(31838) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/31838
Assigning CNA
Red Hat, Inc.
Date Entry Created
20070125	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070125)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org