Vulnerability in Isc Bind
CVE-2009-4022
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 2.6 (Low). Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.080 (94.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 95th percentile — 94.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.080 · newest: 0.080 · change: 0.000
Affected products
- Isc Bind — versions 9.0, 9.0.0, 9.0.1
Public proof-of-concept exploits
References
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7261 (signature, vdb-entry)
- secunia.com/advisories/40730 (Vendor Advisory, third-party-advisory)
- secunia.com/advisories/37426 (Vendor Advisory, third-party-advisory)
- aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:10821 (signature, vdb-entry)
- www.vupen.com/english/advisories/2010/0176 (vdb-entry, Vendor Advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/54416 (vdb-entry)
- bugzilla.redhat.com/show_bug.cgi (Patch)
- www.securityfocus.com/bid/37118 (vdb-entry)
- secunia.com/advisories/38794 (Vendor Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2009-4022?
- CVE-2009-4022 is a vulnerability in Isc Bind. Published 2009-11-25.
- Is CVE-2009-4022 known to be exploited?
- 12 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.