MEDIUM
BIND dnssec denial of service
Published Jan 25, 2007
4.3
MEDIUMCVSS 2.0
EPSS 44.40%
Description
ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.
Affected products
No data.
OR
- 9.0
- 9.0.0
- 9.0.0
- 9.0.0
- 9.0.0
- 9.0.0
- 9.0.0
- 9.0.1
- 9.0.1
- 9.0.1
- 9.1
- 9.1.0
- 9.1.1
- 9.1.1
- 9.1.1
- 9.1.1
- 9.1.1
- 9.1.1
- 9.1.1
- 9.1.1
- 9.1.2
- 9.1.2
- 9.1.3
- 9.1.3
- 9.1.3
- 9.1.3
- 9.2
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.0
- 9.2.1
- 9.2.1
- 9.2.1
- 9.2.2
- 9.2.2
- 9.2.2
- 9.2.2
- 9.2.3
- 9.2.3
- 9.2.3
- 9.2.3
- 9.2.3
- 9.2.4
- 9.2.4
- 9.2.4
- 9.2.4
- 9.2.4
- 9.2.4
- 9.2.4
- 9.2.4
- 9.2.5
- 9.2.5
- 9.2.5
- 9.2.6
- 9.2.6
- 9.3
- 9.3.0
- 9.3.0
- 9.3.0
- 9.3.0
- 9.3.0
- 9.3.0
- 9.3.0
- 9.3.0
- 9.3.1
- 9.3.1
- 9.3.1
- 9.3.2
- 9.3.2
- 9.4.0
- 9.4.0
- 9.4.0
- 9.4.0
- 9.4.0
- 9.4.0
- 9.4.0
- 9.4.0
- 9.4.0
- 9.5.0
No data.
Red Hat Enterprise Linux 2.1
bind-0:9.2.1-8.EL2
Fixed · RHSA-2007:0044
Red Hat Enterprise Linux 3
bind-20:9.2.4-20.EL3
Fixed · RHSA-2007:0044
Red Hat Enterprise Linux 4
bind-20:9.2.4-24.EL4
Fixed · RHSA-2007:0044
Red Hat Enterprise Linux 5
bind-30:9.3.3-8.el5
Fixed · RHSA-2007:0057
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 2.1 | bind-0:9.2.1-8.EL2 | Fixed | RHSA-2007:0044 |
| Red Hat Enterprise Linux 3 | bind-20:9.2.4-20.EL3 | Fixed | RHSA-2007:0044 |
| Red Hat Enterprise Linux 4 | bind-20:9.2.4-24.EL4 | Fixed | RHSA-2007:0044 |
| Red Hat Enterprise Linux 5 | bind-30:9.3.3-8.el5 | Fixed | RHSA-2007:0057 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
4.3 MEDIUM NVD
AV:N/AC:M/Au:N/C:N/I:N/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
44.40% 0.44395
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.44395
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (20 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 44.40% (0.44395) | 98.72th | v5 (v2026.06.15) |
| Aug 23, 2026 | 44.40% (0.44395) | 98.70th | v5 (v2026.06.15) |
| Jun 15, 2026 | 43.35% (0.43355) | 98.56th | v5 (v2026.06.15) |
| Nov 5, 2025 | 41.54% (0.41543) | 97.24th | v4 (v2025.03.14) |
| Jul 22, 2025 | 44.73% (0.44727) | 97.44th | v4 (v2025.03.14) |
| Jun 2, 2025 | 68.44% (0.68439) | 98.51th | v4 (v2025.03.14) |
| Mar 30, 2025 | 80.02% (0.80018) | 99.06th | v4 (v2025.03.14) |
| Mar 29, 2025 | 82.03% (0.82027) | 98.99th | v4 (v2025.03.14) |
| Mar 17, 2025 | 80.02% (0.80018) | 99.06th | v4 (v2025.03.14) |
| Dec 17, 2024 | 95.30% (0.95299) | 99.52th | v3 (v2023.03.01) |
| Jun 19, 2024 | 97.10% (0.97098) | 99.78th | v3 (v2023.03.01) |
| Mar 22, 2024 | 96.98% (0.96979) | 99.72th | v3 (v2023.03.01) |
| Jan 6, 2024 | 96.92% (0.96918) | 99.66th | v3 (v2023.03.01) |
| Nov 29, 2023 | 97.10% (0.97100) | 99.72th | v3 (v2023.03.01) |
| Oct 22, 2023 | 97.06% (0.97060) | 99.68th | v3 (v2023.03.01) |
| Sep 14, 2023 | 97.02% (0.97019) | 99.64th | v3 (v2023.03.01) |
| Jun 29, 2023 | 97.01% (0.97006) | 99.60th | v3 (v2023.03.01) |
| Mar 7, 2023 | 97.15% (0.97150) | 99.61th | v3 (v2023.03.01) |
| Mar 6, 2023 | 44.11% (0.44114) | 98.35th | v2 (v2022.01.01) |
| Feb 4, 2022 | 44.11% (0.44114) | 97.70th | v2 (v2022.01.01) |
Weaknesses (1)
References (70)
- ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc vendor-advisoryx_refsource_SGI
- http://docs.info.apple.com/article.html?artnum=305530 x_refsource_CONFIRM
- http://fedoranews.org/cms/node/2507 vendor-advisoryx_refsource_FEDORA
- http://fedoranews.org/cms/node/2537 vendor-advisoryx_refsource_FEDORA
- http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc vendor-advisoryx_refsource_NETBSD
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 vendor-advisoryx_refsource_HP
- http://lists.apple.com/archives/security-announce/2007/May/msg00004.html vendor-advisoryx_refsource_APPLE
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html mailing-listx_refsource_FULLDISC
- http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html vendor-advisoryx_refsource_SUSE
- http://marc.info/?l=bind-announce&m=116968519300764&w=2 mailing-listx_refsource_MLIST
- http://secunia.com/advisories/23904 third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
- http://secunia.com/advisories/23924 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/23943 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/23944 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/23972 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/23974 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/23977 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24014 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24048 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24054 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24083 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24129 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24203 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24284 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24648 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24930 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/24950 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25402 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25482 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25649 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25715 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/26909 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/27706 third-party-advisoryx_refsource_SECUNIA
- http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc vendor-advisoryx_refsource_FREEBSD
- http://security.gentoo.org/glsa/glsa-200702-06.xml vendor-advisoryx_refsource_GENTOO
- http://securitytracker.com/id?1017573 vdb-entryx_refsource_SECTRACK
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157 vendor-advisoryx_refsource_SLACKWARE
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102969-1 vendor-advisoryx_refsource_SUNALERT
- http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm x_refsource_CONFIRM
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY95618 vendor-advisoryx_refsource_AIXAPAR
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619 vendor-advisoryx_refsource_AIXAPAR
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144 vendor-advisoryx_refsource_AIXAPAR
- http://www-1.ibm.com/support/docview.wss?uid=isg1IY96324 vendor-advisoryx_refsource_AIXAPAR
- http://www.debian.org/security/2007/dsa-1254 vendor-advisoryx_refsource_DEBIAN
- http://www.isc.org/index.pl?/sw/bind/bind-security.php x_refsource_CONFIRM
- http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8 x_refsource_CONFIRMPatch
- http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4 x_refsource_CONFIRMPatch
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:030 vendor-advisoryx_refsource_MANDRIVA
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html vendor-advisoryx_refsource_OPENPKG
- http://www.redhat.com/support/errata/RHSA-2007-0044.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2007-0057.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/bid/22231 vdb-entryx_refsource_BID
- http://www.trustix.org/errata/2007/0005 vendor-advisoryx_refsource_TRUSTIX
- http://www.ubuntu.com/usn/usn-418-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2007/1401 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/1939 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2002 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2163 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2245 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2315 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/3229 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2007-0494 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=225268 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31838 vdb-entryx_refsource_XF
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 x_refsource_CONFIRM
- https://issues.rpath.com/browse/RPL-989 x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2007-0494
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11523 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2007-0494
- https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 vendor-advisoryx_refsource_HP
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jan 25, 2007
Updated Aug 7, 2024
Reserved Jan 25, 2007
Link CVE-2007-0494
CISA Vulnrichment
Updated n/a