Mô tả CVE

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.

Thông tin CVE

Điểm yếu liên quan

CWE-ID	Tên điểm yếu	Nguồn
CWE-16	Category : Configuration Weaknesses in this category are typically introduced during the configuration of the software.

Số liệu

Số liệu	Điểm	Mức độ nghiêm trọng	CVSS Vector	Nguồn
V2	4.3		AV:N/AC:M/Au:N/C:N/I:N/A:P	nvd@nist.gov

EPSS

EPSS là mô hình tính điểm dự đoán khả năng một lỗ hổng bị khai thác.

Điểm EPSS

Mô hình EPSS tạo ra điểm xác suất từ 0 đến 1 (0 đến 100%). Điểm càng cao, xác suất một lỗ hổng bị khai thác càng lớn.

Phân vị EPSS

Phân vị được dùng để xếp hạng CVE theo điểm EPSS. Ví dụ, một CVE ở phân vị thứ 95 theo điểm EPSS có nhiều khả năng bị khai thác hơn 95% CVE khác. Do đó, phân vị được dùng để so sánh điểm EPSS của một CVE với các CVE khác.

EPSS First.org

Thông tin khai thác

Exploit Database EDB-ID : 9300

Ngày xuất bản : 2009-07-29 22h00 +00:00
Tác giả : kingcope
EDB đã xác minh : Yes

Sản phẩm được đề cập

Cấu hình 0

Isc>>Bind >> Version 9.4

Isc>>Bind >> Version 9.4.0

Isc>>Bind >> Version 9.4.1

Isc>>Bind >> Version 9.4.2

Isc>>Bind >> Version 9.4.3

Isc>>Bind >> Version 9.5

Isc>>Bind >> Version 9.5.0

Isc>>Bind >> Version 9.6

Isc>>Bind >> Version 9.6.0

Isc>>Bind >> Version 9.6.1

Tài liệu tham khảo

http://secunia.com/advisories/36035

http://secunia.com/advisories/36063

http://www.vupen.com/english/advisories/2009/2171

http://secunia.com/advisories/36056

http://secunia.com/advisories/36038

http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc

http://www.kb.cert.org/vuls/id/725188
Tags : US Government Resource

http://secunia.com/advisories/37471

http://secunia.com/advisories/36050

http://www.openbsd.org/errata44.html#014_bind

http://www.securityfocus.com/archive/1/505403/100/0/threaded

http://secunia.com/advisories/36192

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

http://www.vupen.com/english/advisories/2009/2088

http://www.securitytracker.com/id?1022613

https://www.isc.org/node/474
Tags : Patch, Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1

http://www.vupen.com/english/advisories/2009/2247

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806

http://www.securityfocus.com/archive/1/507985/100/0/threaded

http://secunia.com/advisories/39334

http://www.vupen.com/english/advisories/2009/2036

http://wiki.rpath.com/Advisories:rPSA-2009-0113

http://secunia.com/advisories/36098

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414

http://up2date.astaro.com/2009/08/up2date_7505_released.html

http://www.ubuntu.com/usn/usn-808-1

http://secunia.com/advisories/36086

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245

http://secunia.com/advisories/36053

ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc

http://www.vupen.com/english/advisories/2009/3316

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975

http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1

Ngày	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	15.27%	–	–
2022-03-13	–	–	15.27%	–	–
2022-04-03	–	–	15.27%	–	–
2023-03-12	–	–	–	96.5%	–
2024-01-28	–	–	–	96.5%	–
2024-06-02	–	–	–	96.5%	–
2024-07-07	–	–	–	96.39%	–
2024-12-22	–	–	–	95.52%	–
2025-01-19	–	–	–	95.52%	–
2025-02-09	–	–	–	95.5%	–
2025-02-16	–	–	–	95.5%	–
2025-03-16	–	–	–	95.43%	–
2025-03-18	–	–	–	–	46.85%
2025-04-16	–	–	–	–	40.55%
2025-05-17	–	–	–	–	35.78%
2025-08-27	–	–	–	–	40.55%
2025-10-19	–	–	–	–	36.47%
2025-11-30	–	–	–	–	46.2%
2025-12-01	–	–	–	–	46.2%
2025-12-04	–	–	–	–	46.2%
2025-12-07	–	–	–	–	46.2%
2026-01-18	–	–	–	–	33.3%
2026-01-23	–	–	–	–	33.86%
2026-02-22	–	–	–	–	33.3%
2026-03-08	–	–	–	–	29.46%
2026-05-10	–	–	–	–	33.3%

Ngày	Phân vị
2022-02-06	91%
2022-03-13	92%
2022-04-03	96%
2023-03-12	99%
2024-01-28	1%
2024-06-02	1%
2024-07-07	1%
2024-12-22	1%
2025-01-19	1%
2025-02-09	1%
2025-02-16	1%
2025-03-16	1%
2025-03-18	97%
2025-04-16	97%
2025-05-17	97%
2025-08-27	97%
2025-10-19	97%
2025-11-30	97%
2025-12-01	98%
2025-12-04	97%
2025-12-07	98%
2026-01-18	97%
2026-01-23	97%
2026-02-22	97%
2026-03-08	97%
2026-05-10	97%

CVE-2009-0696 : Chi tiết

CVE-2009-0696