Vulnerability Report

CVE-2009-0696

Title: Isc Bind Denial of Service (DoS)

DoS

Proof Of Concept

PoC Available for CVE-2009-0696

CWE Category CWE-16

Published Date Jul 29, 2009

Modified Date Jun 16, 2026

Exploit Status Available

Score 4.3 CVSS v2.0

Exploit Probability (EPSS)

12.65%

Vulnerability Summary

CVE-2009-0696: The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.

Impacted Vendors

isc 1

Reference Links

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975 http://secunia.com/advisories/36035 http://secunia.com/advisories/36038 http://secunia.com/advisories/36050 http://secunia.com/advisories/36053 http://secunia.com/advisories/36056 http://secunia.com/advisories/36063 http://secunia.com/advisories/36086 http://secunia.com/advisories/36098 http://secunia.com/advisories/36192 http://secunia.com/advisories/37471 http://secunia.com/advisories/39334 http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1 http://up2date.astaro.com/2009/08/up2date_7505_released.html http://wiki.rpath.com/Advisories:rPSA-2009-0113 http://www.kb.cert.org/vuls/id/725188 http://www.openbsd.org/errata44.html#014_bind http://www.securityfocus.com/archive/1/505403/100/0/threaded http://www.securityfocus.com/archive/1/507985/100/0/threaded http://www.securitytracker.com/id?1022613 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499 http://www.ubuntu.com/usn/usn-808-1 http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://www.vupen.com/english/advisories/2009/2036 http://www.vupen.com/english/advisories/2009/2088 http://www.vupen.com/english/advisories/2009/2171 http://www.vupen.com/english/advisories/2009/2247 http://www.vupen.com/english/advisories/2009/3316 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806 https://www.isc.org/node/474 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975 http://secunia.com/advisories/36035 http://secunia.com/advisories/36038 http://secunia.com/advisories/36050 http://secunia.com/advisories/36053 http://secunia.com/advisories/36056 http://secunia.com/advisories/36063 http://secunia.com/advisories/36086 http://secunia.com/advisories/36098 http://secunia.com/advisories/36192 http://secunia.com/advisories/37471 http://secunia.com/advisories/39334 http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1 http://up2date.astaro.com/2009/08/up2date_7505_released.html http://wiki.rpath.com/Advisories:rPSA-2009-0113 http://www.kb.cert.org/vuls/id/725188 http://www.openbsd.org/errata44.html#014_bind http://www.securityfocus.com/archive/1/505403/100/0/threaded http://www.securityfocus.com/archive/1/507985/100/0/threaded http://www.securitytracker.com/id?1022613 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499 http://www.ubuntu.com/usn/usn-808-1 http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://www.vupen.com/english/advisories/2009/2036 http://www.vupen.com/english/advisories/2009/2088 http://www.vupen.com/english/advisories/2009/2171 http://www.vupen.com/english/advisories/2009/2247 http://www.vupen.com/english/advisories/2009/3316 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806 https://www.isc.org/node/474 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

4.3

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:N/C:N/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2009-0696 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/9300

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

December 23, 2025 MODIFIED

Vulnerability data or affected products updated.

July 29, 2009 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected Stack

No specific products linked.