CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-0494

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.684

EPSS Ranking 98.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2007-0494

Isc » Bind » Version: 9.0

cpe:2.3:a:isc:bind:9.0
Isc » Bind » Version: 9.0.0

cpe:2.3:a:isc:bind:9.0.0
Isc » Bind » Version: 9.0.1

cpe:2.3:a:isc:bind:9.0.1
Isc » Bind » Version: 9.1

cpe:2.3:a:isc:bind:9.1
Isc » Bind » Version: 9.1.0

cpe:2.3:a:isc:bind:9.1.0
Isc » Bind » Version: 9.1.1

cpe:2.3:a:isc:bind:9.1.1
Isc » Bind » Version: 9.1.2

cpe:2.3:a:isc:bind:9.1.2
Isc » Bind » Version: 9.1.3

cpe:2.3:a:isc:bind:9.1.3
Isc » Bind » Version: 9.2

cpe:2.3:a:isc:bind:9.2
Isc » Bind » Version: 9.2.0

cpe:2.3:a:isc:bind:9.2.0
Isc » Bind » Version: 9.2.1

cpe:2.3:a:isc:bind:9.2.1
Isc » Bind » Version: 9.2.2

cpe:2.3:a:isc:bind:9.2.2
Isc » Bind » Version: 9.2.3

cpe:2.3:a:isc:bind:9.2.3
Isc » Bind » Version: 9.2.4

cpe:2.3:a:isc:bind:9.2.4
Isc » Bind » Version: 9.2.5

cpe:2.3:a:isc:bind:9.2.5
Isc » Bind » Version: 9.2.6

cpe:2.3:a:isc:bind:9.2.6
Isc » Bind » Version: 9.3

cpe:2.3:a:isc:bind:9.3
Isc » Bind » Version: 9.3.0

cpe:2.3:a:isc:bind:9.3.0
Isc » Bind » Version: 9.3.1

cpe:2.3:a:isc:bind:9.3.1
Isc » Bind » Version: 9.3.2

cpe:2.3:a:isc:bind:9.3.2
Isc » Bind » Version: 9.4.0

cpe:2.3:a:isc:bind:9.4.0
Isc » Bind » Version: 9.5.0

cpe:2.3:a:isc:bind:9.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-0494

Products

Pricing

Contact Us