Login Request a demo
Unscored severity · published Jul 24, 2007
CVE-2007-2926
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name…
–
CVSS
13.1%
EPSS
No
On KEV
Description
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bind · Isc
9.0; 9.1; 9.2; 9.3; 9.4; 9.5; +1 more · source: NVD
Affected product
BI
Bind
Isc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2926
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2926
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=307041
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
More from Bind
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
9.8
CVE-2026-3593
Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
9.8
CVE-2021-25216
In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions…
8.6
CVE-2020-8616
A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially…
8.6
CVE-2016-1286
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature…