CVE Vulnerabilities

CVE-2007-2926

Published: Jul 24, 2007 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Affected Software

Name Vendor Start Version End Version
Bind Isc 9.0 (including) 9.0 (including)
Bind Isc 9.1 (including) 9.1 (including)
Bind Isc 9.2 (including) 9.2 (including)
Bind Isc 9.3 (including) 9.3 (including)
Bind Isc 9.4 (including) 9.4 (including)
Bind Isc 9.5 (including) 9.5 (including)
Bind Isc 9.5.0 (including) 9.5.0 (including)

References