DEBIAN-CVE-2009-0696

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2009-0696
Downstream
DSA-1847-1
Published: 29 Jul 2009, 17:30
Last modified:28 Apr 2026, 20:11

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Jul 2009, 17:30
Published
Vulnerability first disclosed
28 Apr 2026, 20:11
Last Modified
Vulnerability information updated

Description

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.

Affected Systems

  • debian•bind9

    < 1:9.6.1.dfsg.P1-1 | < 1:9.6.1.dfsg.P1-1 | < 1:9.6.1.dfsg.P1-1 | < 1:9.6.1.dfsg.P1-1

References (1)