{
  "GSD": {
    "alias": "CVE-2006-4096",
    "description": "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.",
    "id": "GSD-2006-4096",
    "references": [
      "https://www.suse.com/security/cve/CVE-2006-4096.html",
      "https://www.debian.org/security/2006/dsa-1172",
      "https://access.redhat.com/errata/RHBA-2006:0288",
      "https://access.redhat.com/errata/RHBA-2006:0287"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-4096"
      ],
      "details": "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.",
      "id": "GSD-2006-4096",
      "modified": "2023-12-13T01:19:51.595306Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-4096",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://docs.info.apple.com/article.html?artnum=305530",
            "refsource": "CONFIRM",
            "url": "http://docs.info.apple.com/article.html?artnum=305530"
          },
          {
            "name": "21835",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21835"
          },
          {
            "name": "OpenPKG-SA-2006.019",
            "refsource": "OPENPKG",
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html"
          },
          {
            "name": "ADV-2007-1939",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1939"
          },
          {
            "name": "FreeBSD-SA-06:20.bind",
            "refsource": "FREEBSD",
            "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc"
          },
          {
            "name": "HPSBOV03226",
            "refsource": "HP",
            "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
          },
          {
            "name": "20060908 rPSA-2006-0166-1 bind bind-utils",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/445600/100/0/threaded"
          },
          {
            "name": "SSRT071304",
            "refsource": "HP",
            "url": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144"
          },
          {
            "name": "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en",
            "refsource": "MISC",
            "url": "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en"
          },
          {
            "name": "SUSE-SR:2006:024",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2006_24_sr.html"
          },
          {
            "name": "SSRT101004",
            "refsource": "HP",
            "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
          },
          {
            "name": "21786",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21786"
          },
          {
            "name": "IY89178",
            "refsource": "AIXAPAR",
            "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178"
          },
          {
            "name": "SUSE-SR:2006:023",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"
          },
          {
            "name": "APPLE-SA-2007-05-24",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html"
          },
          {
            "name": "25402",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25402"
          },
          {
            "name": "MDKSA-2006:163",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:163"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-626",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-626"
          },
          {
            "name": "21818",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21818"
          },
          {
            "name": "USN-343-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-343-1"
          },
          {
            "name": "21838",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21838"
          },
          {
            "name": "22298",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/22298"
          },
          {
            "name": "19859",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/19859"
          },
          {
            "name": "21816",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21816"
          },
          {
            "name": "IY89169",
            "refsource": "AIXAPAR",
            "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169"
          },
          {
            "name": "SSRT061213",
            "refsource": "HP",
            "url": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144"
          },
          {
            "name": "21912",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21912"
          },
          {
            "name": "21926",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21926"
          },
          {
            "name": "21790",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21790"
          },
          {
            "name": "[3.9] 20060908 010: SECURITY FIX: September 8, 2006",
            "refsource": "OPENBSD",
            "url": "http://www.openbsd.org/errata.html"
          },
          {
            "name": "ADV-2006-3511",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/3511"
          },
          {
            "name": "oval:org.mitre.oval:def:9623",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623"
          },
          {
            "name": "SSA:2006-257-01",
            "refsource": "SLACKWARE",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.481241"
          },
          {
            "name": "SSRT061239",
            "refsource": "HP",
            "url": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144"
          },
          {
            "name": "ADV-2006-3473",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/3473"
          },
          {
            "name": "VU#697164",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/697164"
          },
          {
            "name": "DSA-1172",
            "refsource": "DEBIAN",
            "url": "http://www.us.debian.org/security/2006/dsa-1172"
          },
          {
            "name": "ADV-2007-1401",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1401"
          },
          {
            "name": "bind-recursive-insist-dos(28744)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28744"
          },
          {
            "name": "21828",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21828"
          },
          {
            "name": "HPSBTU02207",
            "refsource": "HP",
            "url": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144"
          },
          {
            "name": "21752",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21752"
          },
          {
            "name": "1016794",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1016794"
          },
          {
            "name": "24950",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24950"
          },
          {
            "name": "GLSA-200609-11",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200609-11.xml"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-4096"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en",
              "refsource": "MISC",
              "tags": [
                "Patch"
              ],
              "url": "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en"
            },
            {
              "name": "VU#697164",
              "refsource": "CERT-VN",
              "tags": [
                "Patch",
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/697164"
            },
            {
              "name": "1016794",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1016794"
            },
            {
              "name": "21752",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21752"
            },
            {
              "name": "IY89169",
              "refsource": "AIXAPAR",
              "tags": [],
              "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169"
            },
            {
              "name": "IY89178",
              "refsource": "AIXAPAR",
              "tags": [],
              "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178"
            },
            {
              "name": "DSA-1172",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.us.debian.org/security/2006/dsa-1172"
            },
            {
              "name": "FreeBSD-SA-06:20.bind",
              "refsource": "FREEBSD",
              "tags": [],
              "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc"
            },
            {
              "name": "[3.9] 20060908 010: SECURITY FIX: September 8, 2006",
              "refsource": "OPENBSD",
              "tags": [],
              "url": "http://www.openbsd.org/errata.html"
            },
            {
              "name": "USN-343-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-343-1"
            },
            {
              "name": "19859",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/19859"
            },
            {
              "name": "21816",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21816"
            },
            {
              "name": "21786",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21786"
            },
            {
              "name": "21790",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21790"
            },
            {
              "name": "21818",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21818"
            },
            {
              "name": "21828",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21828"
            },
            {
              "name": "21835",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21835"
            },
            {
              "name": "21838",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21838"
            },
            {
              "name": "GLSA-200609-11",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200609-11.xml"
            },
            {
              "name": "SSA:2006-257-01",
              "refsource": "SLACKWARE",
              "tags": [],
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.481241"
            },
            {
              "name": "21912",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21912"
            },
            {
              "name": "21926",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21926"
            },
            {
              "name": "SUSE-SR:2006:023",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"
            },
            {
              "name": "SUSE-SR:2006:024",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2006_24_sr.html"
            },
            {
              "name": "22298",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/22298"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-626",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-626"
            },
            {
              "name": "OpenPKG-SA-2006.019",
              "refsource": "OPENPKG",
              "tags": [],
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html"
            },
            {
              "name": "24950",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24950"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=305530",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://docs.info.apple.com/article.html?artnum=305530"
            },
            {
              "name": "APPLE-SA-2007-05-24",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html"
            },
            {
              "name": "MDKSA-2006:163",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:163"
            },
            {
              "name": "25402",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25402"
            },
            {
              "name": "ADV-2007-1939",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1939"
            },
            {
              "name": "ADV-2006-3511",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/3511"
            },
            {
              "name": "ADV-2007-1401",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1401"
            },
            {
              "name": "SSRT071304",
              "refsource": "HP",
              "tags": [],
              "url": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144"
            },
            {
              "name": "ADV-2006-3473",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/3473"
            },
            {
              "name": "HPSBOV03226",
              "refsource": "HP",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
            },
            {
              "name": "bind-recursive-insist-dos(28744)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28744"
            },
            {
              "name": "oval:org.mitre.oval:def:9623",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623"
            },
            {
              "name": "20060908 rPSA-2006-0166-1 bind bind-utils",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/445600/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-17T21:33Z",
      "publishedDate": "2006-09-06T00:04Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated bind packages that fix several bugs are now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "BIND (Berkeley Internet Name Domain) is an implementation of the DNS\n(Domain Name System) protocols. The bind package provides a DNS server\n(named), which resolves host names to IP addresses, and tools for \ncontrol and verification of the DNS server. The bind-libs package\nprovides the libraries used by the DNS server and bind-utils. The\nbind-utils package provides DNS lookup utilities: host(1), dig(1),\nand nslookup. The bind-devel package provides header files for \ndevelopment with the BIND libraries. A default set of DNS server\nconfiguration files is provided by the caching-nameserver package.\n\nThis update delivers backports from ISC BIND 9.2.6 to apply these fixes:\n\n- If a lookup for another name server\u0027s addresses returned addresses \n  that were unreachable via local routers, lookups for names in domains\n  for which that server is authoritative could experience a four second\n  delay per name not in the cache. No delay is now incurred for addresses\n  served by servers with unreachable addresses.\n\n- Fixes to named\u0027s thread locking logic: This feature in ISC BIND 9.3.0+\nwas backported and delivered in this update.\n\n- edns-udp-size: Users can now set the maximum size of UDP packets used \n  for EDNS0 (RFC 2671), to get past routers / firewalls that enforce a\n  maximum UDP packet size.\n\nMiscellaneous bug fixes, including improved support for custom named.conf\nlocations, are also delivered in this update.\n\nAll BIND users are advised to upgrade to the updated bind packages.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2006:0288",
        "url": "https://access.redhat.com/errata/RHBA-2006:0288"
      },
      {
        "category": "external",
        "summary": "167631",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=167631"
      },
      {
        "category": "external",
        "summary": "169416",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=169416"
      },
      {
        "category": "external",
        "summary": "170360",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=170360"
      },
      {
        "category": "external",
        "summary": "173961",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=173961"
      },
      {
        "category": "external",
        "summary": "174127",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=174127"
      },
      {
        "category": "external",
        "summary": "178300",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=178300"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhba-2006_0288.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: bind bug fix update",
    "tracking": {
      "current_release_date": "2024-11-05T15:42:45+00:00",
      "generator": {
        "date": "2024-11-05T15:42:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHBA-2006:0288",
      "initial_release_date": "2006-08-09T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2006-08-09T00:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2006-08-09T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T15:42:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "Red Hat Enterprise Linux AS version 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "Red Hat Enterprise Linux Desktop version 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "Red Hat Enterprise Linux ES version 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "Red Hat Enterprise Linux WS version 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-4096",
      "discovery_date": "2006-08-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "494543"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "INSIST failure in ISC BIND recursive query",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect Red Hat Enterprise Linux 2.1",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AS version 4",
          "Red Hat Enterprise Linux Desktop version 4",
          "Red Hat Enterprise Linux ES version 4",
          "Red Hat Enterprise Linux WS version 4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4096"
        },
        {
          "category": "external",
          "summary": "RHBZ#494543",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=494543"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4096",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4096"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4096",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4096"
        }
      ],
      "release_date": "2006-09-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-09T00:00:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "Red Hat Enterprise Linux AS version 4",
            "Red Hat Enterprise Linux Desktop version 4",
            "Red Hat Enterprise Linux ES version 4",
            "Red Hat Enterprise Linux WS version 4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2006:0288"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "INSIST failure in ISC BIND recursive query"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated bind packages are available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "BIND (Berkeley Internet Name Domain) is an implementation of the DNS\n(Domain Name System) protocols. The bind package provides a DNS server\n(named), which resolves host names to IP addresses, and tools for \ncontrol and verification of the DNS server. The bind-libs package\nprovides the libraries used by the DNS server and bind-utils. The\nbind-utils package provides DNS lookup utilities: host(1), dig(1),\nand nslookup. The bind-devel package provides header files for \ndevelopment with the BIND libraries. A default set of DNS server\nconfiguration files is provided by the caching-nameserver package.\n\nThis update delivers backports from ISC BIND 9.2.6 to fix these issues:\n--Fixes to named\u0027s thread locking logic\n\nThis feature in ISC BIND 9.3.0+ was backported and delivered in this update:\n--edns-udp-size: Users can now set the maximum size of UDP packets used \n  for EDNS0 (RFC 2671), to get past routers / firewalls that enforce a\n  maximum UDP packet size.\n\nMiscellaneous bug fixes, including improved support for custom named.conf\nlocations, are also delivered in this update.\n\nAll BIND users are advised to upgrade to these updated bind packages.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2006:0287",
        "url": "https://access.redhat.com/errata/RHBA-2006:0287"
      },
      {
        "category": "external",
        "summary": "170326",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=170326"
      },
      {
        "category": "external",
        "summary": "170357",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=170357"
      },
      {
        "category": "external",
        "summary": "170359",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=170359"
      },
      {
        "category": "external",
        "summary": "174129",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=174129"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhba-2006_0287.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: bind bug fix update",
    "tracking": {
      "current_release_date": "2024-11-05T15:42:15+00:00",
      "generator": {
        "date": "2024-11-05T15:42:15+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHBA-2006:0287",
      "initial_release_date": "2006-07-20T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2006-07-20T00:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2006-07-19T15:07:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T15:42:15+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 3",
                  "product_id": "Red Hat Enterprise Linux AS version 3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 3",
                "product": {
                  "name": "Red Hat Desktop version 3",
                  "product_id": "Red Hat Desktop version 3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 3",
                  "product_id": "Red Hat Enterprise Linux ES version 3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 3",
                  "product_id": "Red Hat Enterprise Linux WS version 3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-4096",
      "discovery_date": "2006-08-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "494543"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "INSIST failure in ISC BIND recursive query",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect Red Hat Enterprise Linux 2.1",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Desktop version 3",
          "Red Hat Enterprise Linux AS version 3",
          "Red Hat Enterprise Linux ES version 3",
          "Red Hat Enterprise Linux WS version 3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4096"
        },
        {
          "category": "external",
          "summary": "RHBZ#494543",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=494543"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4096",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4096"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4096",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4096"
        }
      ],
      "release_date": "2006-09-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-20T00:00:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "Red Hat Desktop version 3",
            "Red Hat Enterprise Linux AS version 3",
            "Red Hat Enterprise Linux ES version 3",
            "Red Hat Enterprise Linux WS version 3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2006:0287"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "INSIST failure in ISC BIND recursive query"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2006-4096"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-09-06T00:04:00Z",
    "severity": "MODERATE"
  },
  "details": "BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.",
  "id": "GHSA-qwch-fhfg-fr39",
  "modified": "2022-05-01T07:15:24Z",
  "published": "2022-05-01T07:15:24Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4096"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28744"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-626"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623"
    },
    {
      "type": "WEB",
      "url": "https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144"
    },
    {
      "type": "WEB",
      "url": "http://docs.info.apple.com/article.html?artnum=305530"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=141879471518471\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21752"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21786"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21790"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21816"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21818"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21828"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21835"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21838"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21912"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21926"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/22298"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24950"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25402"
    },
    {
      "type": "WEB",
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200609-11.xml"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1016794"
    },
    {
      "type": "WEB",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.481241"
    },
    {
      "type": "WEB",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169"
    },
    {
      "type": "WEB",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/697164"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:163"
    },
    {
      "type": "WEB",
      "url": "http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2006_24_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openbsd.org/errata.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/445600/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/19859"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-343-1"
    },
    {
      "type": "WEB",
      "url": "http://www.us.debian.org/security/2006/dsa-1172"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/3473"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/3511"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1401"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1939"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}