The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: certcc
Published: 2009-07-29T17:00:00
Updated: 2024-08-07T04:48:51.588Z
Reserved: 2009-02-22T00:00:00
Link: CVE-2009-0696
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-07-29T17:30:00.920
Modified: 2024-11-21T01:00:42.513
Link: CVE-2009-0696
Redhat