NVD

Id
52718  
Name
CVE-2007-0494  
Description
ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-01-25  
Modified Date
2016-12-06  
Seq
2007-0494  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266486 52718 CVE-2007-0494 20070201-01-P  View
266487 52718 CVE-2007-0494 http://docs.info.apple.com/article.html?artnum=305530  View
266488 52718 CVE-2007-0494 FEDORA-2007-147  View
266489 52718 CVE-2007-0494 FEDORA-2007-164  View
266490 52718 CVE-2007-0494 NetBSD-SA2007-003  View
266491 52718 CVE-2007-0494 HPSBUX02219  View
266492 52718 CVE-2007-0494 APPLE-SA-2007-05-24  View
266493 52718 CVE-2007-0494 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player  View
266494 52718 CVE-2007-0494 SUSE-SA:2007:014  View
266495 52718 CVE-2007-0494 [bind-announce] 20070125 Internet Systems Consortium Security Advisory.  View
266496 52718 CVE-2007-0494 oval:org.mitre.oval:def:11523  View
266497 52718 CVE-2007-0494 FreeBSD-SA-07:02  View
266498 52718 CVE-2007-0494 GLSA-200702-06  View
266499 52718 CVE-2007-0494 1017573  View
266500 52718 CVE-2007-0494 SSA:2007-026-01  View
266501 52718 CVE-2007-0494 102969  View
266502 52718 CVE-2007-0494 http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm  View
266503 52718 CVE-2007-0494 IY95618  View
266504 52718 CVE-2007-0494 IY95619  View
266505 52718 CVE-2007-0494 IY96144  View
266506 52718 CVE-2007-0494 IY96324  View
266507 52718 CVE-2007-0494 DSA-1254  View
266508 52718 CVE-2007-0494 http://www.isc.org/index.pl?/sw/bind/bind-security.php  View
266509 52718 CVE-2007-0494 http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8  View
266510 52718 CVE-2007-0494 http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4  View
266511 52718 CVE-2007-0494 MDKSA-2007:030  View
266512 52718 CVE-2007-0494 OpenPKG-SA-2007.007  View
266513 52718 CVE-2007-0494 RHSA-2007:0044  View
266514 52718 CVE-2007-0494 RHSA-2007:0057  View
266515 52718 CVE-2007-0494 22231  View
266516 52718 CVE-2007-0494 2007-0005  View
266517 52718 CVE-2007-0494 USN-418-1  View
266518 52718 CVE-2007-0494 ADV-2007-1401  View
266519 52718 CVE-2007-0494 ADV-2007-1939  View
266520 52718 CVE-2007-0494 ADV-2007-2002  View
266521 52718 CVE-2007-0494 ADV-2007-2163  View
266522 52718 CVE-2007-0494 ADV-2007-2245  View
266523 52718 CVE-2007-0494 ADV-2007-2315  View
266524 52718 CVE-2007-0494 ADV-2007-3229  View
266525 52718 CVE-2007-0494 bind-rrsets-dos(31838)  View
266526 52718 CVE-2007-0494 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488  View
266527 52718 CVE-2007-0494 https://issues.rpath.com/browse/RPL-989  View
266528 52718 CVE-2007-0494 SSRT061213  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51421 JVNDB-2007-000083 ISC BIND の DNSSEC 検証時におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND には、* (ANY) DNS クエリに対するレスポンスにおいて DNS セキュリティ拡張の DNSSEC 検証に不備が存在するため、アサーションエラーが発生する脆弱性が存在します。 CVE-2007-0494 23849 CVE-2007-0494 52718 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000083.html 2007-01-24 2007-08-07 View