CVE-2006-4096

INSIST failure in ISC BIND recursive query

Published Sep 6, 2006 CVSS 2.0 · 5.0 Medium EPSS 8.3% KEV · Not listed
Description
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1172-1 New bind9 packages fix denial of service
Ubuntu USN Ubuntu USN USN-343-1 bind9 vulnerabilities
References
Link Providers
http://docs.info.apple.com/article.html?artnum=305530 cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html cve-icon cve-icon
http://marc.info/?l=bugtraq&m=141879471518471&w=2 cve-icon cve-icon
http://secunia.com/advisories/21752 cve-icon cve-icon
http://secunia.com/advisories/21786 cve-icon cve-icon
http://secunia.com/advisories/21790 cve-icon cve-icon
http://secunia.com/advisories/21816 cve-icon cve-icon
http://secunia.com/advisories/21818 cve-icon cve-icon
http://secunia.com/advisories/21828 cve-icon cve-icon
http://secunia.com/advisories/21835 cve-icon cve-icon
http://secunia.com/advisories/21838 cve-icon cve-icon
http://secunia.com/advisories/21912 cve-icon cve-icon
http://secunia.com/advisories/21926 cve-icon cve-icon
http://secunia.com/advisories/22298 cve-icon cve-icon
http://secunia.com/advisories/24950 cve-icon cve-icon
http://secunia.com/advisories/25402 cve-icon cve-icon
http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200609-11.xml cve-icon cve-icon
http://securitytracker.com/id?1016794 cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241 cve-icon cve-icon
http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169 cve-icon cve-icon
http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178 cve-icon cve-icon
http://www.kb.cert.org/vuls/id/697164 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2006:163 cve-icon cve-icon
http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2006_23_sr.html cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2006_24_sr.html cve-icon cve-icon
http://www.openbsd.org/errata.html cve-icon cve-icon
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/445600/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/19859 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-343-1 cve-icon cve-icon
http://www.us.debian.org/security/2006/dsa-1172 cve-icon cve-icon
http://www.vupen.com/english/advisories/2006/3473 cve-icon cve-icon
http://www.vupen.com/english/advisories/2006/3511 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/1401 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/1939 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/28744 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-626 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2006-4096 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2006-4096 cve-icon
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 6:57 PM
Reserved
Aug 14, 2006, 12:00 AM
Status
Modified
Published
Sep 6, 2006, 12:04 AM
Modified
Jun 16, 2026, 10:28 PM
Severity
Important
Public date
Sep 5, 2006, 12:00 AM