CVE-2007-2926

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages…

published July 24, 2007

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13090 · 96.3th percentile
Published
2007-07-24T17:00Z
EPSS history
Timeline
  • 24 JUL 17:00Z
    ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages…
    cvelistv5