CVE-2006-4096

Description

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.

Risk Information

Base Score

7.5

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

19.584

Associated Vulnerability

Vulnerability	OS Platform
Update bind 9.3.2 to latest version	Windows
Multiple Vulnerabilities are affected in BIND 9.3.0	Windows
Multiple Vulnerabilities are affected in BIND 9.3.2	Windows
Multiple Vulnerabilities are affected in BIND 9.2.0	Windows
Multiple Vulnerabilities are affected in BIND 9.2.1	Windows
Multiple Vulnerabilities are affected in BIND 9.2.2	Windows
Multiple Vulnerabilities are affected in BIND 9.2.3	Windows
Multiple Vulnerabilities are affected in BIND 9.3	Windows
Multiple Vulnerabilities are affected in BIND 9.3.1	Windows
Multiple Vulnerabilities are affected in BIND 9.2.6	Windows
Multiple Vulnerabilities are affected in BIND 9.2.4	Windows
Multiple Vulnerabilities are affected in BIND 9.2.5	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234