CVE-2009-4022

Description

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.

2.6

CVSS

Severity: Low

CVSS 2.0 •

EPSS 20.04% Top 5%

Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory ibm.com Vendor Advisory sun.com Vendor Advisory apple.com Vendor Advisory mandriva.com Vendor Advisory ibm.com Vendor Advisory ibm.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory sun.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory vupen.com Vendor Advisory vupen.com Vendor Advisory vupen.com Vendor Advisory vupen.com Vendor Advisory isc.org Vendor Advisory isc.org

Affected: n/a n/a

References

Link	Tags
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7261	vdb entry signature
http://secunia.com/advisories/40730	third party advisory vendor advisory
http://secunia.com/advisories/37426	third party advisory vendor advisory
http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10821	vdb entry signature
http://www.vupen.com/english/advisories/2010/0176	vdb entry vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54416	vdb entry
https://bugzilla.redhat.com/show_bug.cgi?id=538744	patch
http://www.securityfocus.com/bid/37118	vdb entry
http://secunia.com/advisories/38794	third party advisory vendor advisory
http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing list
http://osvdb.org/60493	vdb entry
https://www.isc.org/advisories/CVE-2009-4022v6	vendor advisory
http://secunia.com/advisories/38240	third party advisory vendor advisory
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01172.html	vendor advisory
http://secunia.com/advisories/37491	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-888-1	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7459	vdb entry signature
http://www.openwall.com/lists/oss-security/2009/11/24/8	mailing list
http://www.kb.cert.org/vuls/id/418861	third party advisory us government resource
https://www.isc.org/advisories/CVE2009-4022	vendor advisory
http://www.ibm.com/support/docview.wss?uid=isg1IZ71667	vendor advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1	vendor advisory
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html	vendor advisory
http://secunia.com/advisories/39334	third party advisory vendor advisory
http://www.openwall.com/lists/oss-security/2009/11/24/2	mailing list
http://www.mandriva.com/security/advisories?name=MDVSA-2009:304	vendor advisory
http://www.vupen.com/english/advisories/2009/3335	vdb entry vendor advisory
http://www.vupen.com/english/advisories/2010/0622	vdb entry vendor advisory
https://issues.rpath.com/browse/RPL-3152
http://www.ibm.com/support/docview.wss?uid=isg1IZ68597	vendor advisory
http://secunia.com/advisories/38834	third party advisory vendor advisory
http://secunia.com/advisories/38219	third party advisory vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11745	vdb entry signature
http://www.ibm.com/support/docview.wss?uid=isg1IZ71774	vendor advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01188.html	vendor advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018
http://support.apple.com/kb/HT5002
ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt
http://www.redhat.com/support/errata/RHSA-2009-1620.html	vendor advisory
http://www.openwall.com/lists/oss-security/2009/11/24/1	mailing list
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1	vendor advisory
http://www.vupen.com/english/advisories/2010/0528	vdb entry vendor advisory

Frequently Asked Questions

What is the severity of CVE-2009-4022?: CVE-2009-4022 has been scored as a low severity vulnerability.
How to fix CVE-2009-4022?: To fix CVE-2009-4022, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2009-4022 being actively exploited in the wild?: It is possible that CVE-2009-4022 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~20% probability that this vulnerability will be exploited by malicious actors in the next 30 days.