CVE Feed

Dashboard / CVE / CVE-2007-2926

CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

Published:Jul 23, 2007

Last Modified:Apr 23, 2026

EPS:Jul 24, 2007

EPSS Score:0.2056

CVSS Score:4.3

Affected Products

Vendor

Product

Action

Vendor

Isc

Product

Bind

Isc

Bind

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Exploits

https://www.exploit-db.com/exploits/4266

Common Weakness Enumeration

No CWE recorded yet

Common Attack Pattern Enumeration and Classification (CAPEC)

No CAPEC recorded yet

Related CVEs

CVE-2026-12617 (CVSS 7.5) — The issue is unexpected program termination based on ordering and/or specific content in responses to queries …

CVE-2026-11605 (CVSS 7.5) — The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all …

CVE-2026-10723 (CVSS 6.8) — BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authentica…

CVE-2026-10822 (CVSS 6.5) — If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and m…

CVE-2026-13204 (CVSS 7.5) — If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RR…

CVE-2026-11331 (CVSS 7.5) — An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names…

CVE-2026-11622 (CVSS 7.5) — A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer f…

CVE-2026-11721 (CVSS 7.5) — It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels …

CVE-2026-13321 (CVSS 8.6) — The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the si…

CVE-2026-5950 (CVSS 5.3) — An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling,…

References

ftp://aix.software.ibm.com/aix/efixes/security/README

ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc

http://docs.info.apple.com/article.html?artnum=307041

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368

http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html

http://marc.info/?l=bugtraq&m=141879471518471&w=2

http://secunia.com/advisories/26148

http://secunia.com/advisories/26152

http://secunia.com/advisories/26160

http://secunia.com/advisories/26180

http://secunia.com/advisories/26195

http://secunia.com/advisories/26217

http://secunia.com/advisories/26227

http://secunia.com/advisories/26231

http://secunia.com/advisories/26236

http://secunia.com/advisories/26261

http://secunia.com/advisories/26308

http://secunia.com/advisories/26330

http://secunia.com/advisories/26509

http://secunia.com/advisories/26515

http://secunia.com/advisories/26531

http://secunia.com/advisories/26605

http://secunia.com/advisories/26607

http://secunia.com/advisories/26847

http://secunia.com/advisories/26925

http://secunia.com/advisories/27643

http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1

http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903

http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only

http://www.debian.org/security/2007/dsa-1341

http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml

http://www.isc.org/index.pl?/sw/bind/bind-security.php

http://www.kb.cert.org/vuls/id/252735

http://www.mandriva.com/security/advisories?name=MDKSA-2007:149

http://www.novell.com/linux/security/advisories/2007_47_bind.html

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html

http://www.redhat.com/support/errata/RHSA-2007-0740.html

http://www.securiteam.com/securitynews/5VP0L0UM0A.html

http://www.securityfocus.com/archive/1/474516/100/0/threaded

http://www.securityfocus.com/archive/1/474545/100/0/threaded

http://www.securityfocus.com/archive/1/474808/100/0/threaded

http://www.securityfocus.com/archive/1/474856/100/0/threaded

http://www.securityfocus.com/bid/25037

http://www.securityfocus.com/bid/26444

http://www.securitytracker.com/id?1018442

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385

http://www.trusteer.com/docs/bind9dns.html

http://www.trusteer.com/docs/bind9dns_s.html

http://www.trustix.org/errata/2007/0023/

http://www.ubuntu.com/usn/usn-491-1

http://www.us-cert.gov/cas/techalerts/TA07-319A.html

http://www.vupen.com/english/advisories/2007/2627

http://www.vupen.com/english/advisories/2007/2662

http://www.vupen.com/english/advisories/2007/2782

http://www.vupen.com/english/advisories/2007/2914

http://www.vupen.com/english/advisories/2007/2932

http://www.vupen.com/english/advisories/2007/3242

http://www.vupen.com/english/advisories/2007/3868

https://exchange.xforce.ibmcloud.com/vulnerabilities/35575

https://issues.rpath.com/browse/RPL-1587

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226

ftp://aix.software.ibm.com/aix/efixes/security/README

ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc

http://docs.info.apple.com/article.html?artnum=307041

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368

http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html

http://marc.info/?l=bugtraq&m=141879471518471&w=2

http://secunia.com/advisories/26148

http://secunia.com/advisories/26152

http://secunia.com/advisories/26160

http://secunia.com/advisories/26180

http://secunia.com/advisories/26195

http://secunia.com/advisories/26217

http://secunia.com/advisories/26227

http://secunia.com/advisories/26231

http://secunia.com/advisories/26236

http://secunia.com/advisories/26261

http://secunia.com/advisories/26308

http://secunia.com/advisories/26330

http://secunia.com/advisories/26509

http://secunia.com/advisories/26515

http://secunia.com/advisories/26531

http://secunia.com/advisories/26605

http://secunia.com/advisories/26607

http://secunia.com/advisories/26847

http://secunia.com/advisories/26925

http://secunia.com/advisories/27643

http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1

http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903

http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only

http://www.debian.org/security/2007/dsa-1341

http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml

http://www.isc.org/index.pl?/sw/bind/bind-security.php

http://www.kb.cert.org/vuls/id/252735

http://www.mandriva.com/security/advisories?name=MDKSA-2007:149

http://www.novell.com/linux/security/advisories/2007_47_bind.html

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html

http://www.redhat.com/support/errata/RHSA-2007-0740.html

http://www.securiteam.com/securitynews/5VP0L0UM0A.html

http://www.securityfocus.com/archive/1/474516/100/0/threaded

http://www.securityfocus.com/archive/1/474545/100/0/threaded

http://www.securityfocus.com/archive/1/474808/100/0/threaded

http://www.securityfocus.com/archive/1/474856/100/0/threaded

http://www.securityfocus.com/bid/25037

http://www.securityfocus.com/bid/26444

http://www.securitytracker.com/id?1018442

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385

http://www.trusteer.com/docs/bind9dns.html

http://www.trusteer.com/docs/bind9dns_s.html

http://www.trustix.org/errata/2007/0023/

http://www.ubuntu.com/usn/usn-491-1

http://www.us-cert.gov/cas/techalerts/TA07-319A.html

http://www.vupen.com/english/advisories/2007/2627

http://www.vupen.com/english/advisories/2007/2662

http://www.vupen.com/english/advisories/2007/2782

http://www.vupen.com/english/advisories/2007/2914

http://www.vupen.com/english/advisories/2007/2932

http://www.vupen.com/english/advisories/2007/3242

http://www.vupen.com/english/advisories/2007/3868

https://exchange.xforce.ibmcloud.com/vulnerabilities/35575

https://issues.rpath.com/browse/RPL-1587

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High