National Cyber Awareness System

Vulnerability Summary for CVE-2009-4022

Overview

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#418861

Name: VU#418861

Hyperlink:http://www.kb.cert.org/vuls/id/418861

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=538744

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=538744

External Source: FEDORA

Name: FEDORA-2009-12233

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01188.html

External Source: FEDORA

Name: FEDORA-2009-12218

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01172.html

External Source: CONFIRM

Name: https://www.isc.org/advisories/CVE2009-4022

Type: Advisory

Hyperlink:https://www.isc.org/advisories/CVE2009-4022

External Source: CONFIRM

Name: https://www.isc.org/advisories/CVE-2009-4022v6

Type: Advisory

Hyperlink:https://www.isc.org/advisories/CVE-2009-4022v6

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-3152

Hyperlink:https://issues.rpath.com/browse/RPL-3152

External Source: XF

Name: bind-dnssec-cache-poisoning(54416)

Hyperlink:http://xforce.iss.net/xforce/xfdb/54416

External Source: VUPEN

Name: ADV-2010-0622

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/0622

External Source: VUPEN

Name: ADV-2010-0528

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/0528

External Source: VUPEN

Name: ADV-2010-0176

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/0176

External Source: VUPEN

Name: ADV-2009-3335

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2009/3335

External Source: UBUNTU

Name: USN-888-1

Hyperlink:http://www.ubuntu.com/usn/USN-888-1

External Source: BID

Name: 37118

Hyperlink:http://www.securityfocus.com/bid/37118

External Source: REDHAT

Name: RHSA-2009:1620

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-1620.html

External Source: MLIST

Name: [oss-security] 20091124 Re: a new bind issue

Hyperlink:http://www.openwall.com/lists/oss-security/2009/11/24/8

External Source: MLIST

Name: [oss-security] 20091124 CVE request: BIND 9 bug involving DNSSEC and the additional section

Hyperlink:http://www.openwall.com/lists/oss-security/2009/11/24/2

External Source: MLIST

Name: [oss-security] 20091124 a new bind issue

Hyperlink:http://www.openwall.com/lists/oss-security/2009/11/24/1

External Source: MANDRIVA

Name: MDVSA-2009:304

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:304

External Source: AIXAPAR

Name: IZ71774

Hyperlink:http://www.ibm.com/support/docview.wss?uid=isg1IZ71774

External Source: AIXAPAR

Name: IZ71667

Hyperlink:http://www.ibm.com/support/docview.wss?uid=isg1IZ71667

External Source: AIXAPAR

Name: IZ68597

Hyperlink:http://www.ibm.com/support/docview.wss?uid=isg1IZ68597

External Source: CONFIRM

Name: http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018

Hyperlink:http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5002

Hyperlink:http://support.apple.com/kb/HT5002

External Source: SUNALERT

Name: 1021798

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1

External Source: SUNALERT

Name: 1021660

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1

External Source: SECUNIA

Name: 40730

Type: Advisory

Hyperlink:http://secunia.com/advisories/40730

External Source: SECUNIA

Name: 39334

Type: Advisory

Hyperlink:http://secunia.com/advisories/39334

External Source: SECUNIA

Name: 38834

Type: Advisory

Hyperlink:http://secunia.com/advisories/38834

External Source: SECUNIA

Name: 38794

Type: Advisory

Hyperlink:http://secunia.com/advisories/38794

External Source: SECUNIA

Name: 38240

Type: Advisory

Hyperlink:http://secunia.com/advisories/38240

External Source: SECUNIA

Name: 38219

Type: Advisory

Hyperlink:http://secunia.com/advisories/38219

External Source: SECUNIA

Name: 37491

Type: Advisory

Hyperlink:http://secunia.com/advisories/37491

External Source: SECUNIA

Name: 37426

Type: Advisory

Hyperlink:http://secunia.com/advisories/37426

External Source: OVAL

Name: oval:org.mitre.oval:def:7459

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7459

External Source: OVAL

Name: oval:org.mitre.oval:def:7261

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7261

External Source: OVAL

Name: oval:org.mitre.oval:def:11745

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11745

External Source: OVAL

Name: oval:org.mitre.oval:def:10821

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10821

External Source: OSVDB

Name: 60493

Hyperlink:http://osvdb.org/60493

External Source: MLIST

Name: [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates

Hyperlink:http://lists.vmware.com/pipermail/security-announce/2010/000082.html

External Source: APPLE

Name: APPLE-SA-2011-10-12-3

Hyperlink:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

External Source: CONFIRM

Name: http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc

Hyperlink:http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc

External Source: CONFIRM

Name: ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt

Hyperlink:ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt

References to Check Content

Identifier:oval:org.mitre.oval:def:7261

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7261

Identifier:oval:org.mitre.oval:def:11745

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11745

Identifier:oval:org.mitre.oval:def:7459

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7459

Identifier:oval:org.mitre.oval:def:10821

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10821