The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when…

Description

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.

Scores

EPSS (exploitation in 30 days)

12.6% · top 3.7% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

• n/a
• CWE-16 (opens in a new tab)All about CWE-16 and its CVEs

Affected products

• n/a

  • affected n/a

References (35)

• 36035 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 36063 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2009-2171 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 36056 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 36038 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc (opens in a new tab)x_refsource_CONFIRMx_transferred
• VU#725188 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• 37471 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 36050 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• [4.4] 014: RELIABILITY FIX: July 29, 2009 (opens in a new tab)vendor-advisoryx_refsource_OPENBSDx_transferred
• 20090729 rPSA-2009-0113-1 bind bind-utils (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 36192 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• ADV-2009-2088 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 1022613 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• https://www.isc.org/node/474 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 1020788 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
• ADV-2009-2247 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• oval:org.mitre.oval:def:7806 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 39334 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2009-2036 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://wiki.rpath.com/Advisories:rPSA-2009-0113 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 36098 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• oval:org.mitre.oval:def:10414 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• http://up2date.astaro.com/2009/08/up2date_7505_released.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• USN-808-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 36086 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• FEDORA-2009-8119 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• oval:org.mitre.oval:def:12245 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• 36053 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SSA:2009-210-01 (opens in a new tab)vendor-advisoryx_refsource_SLACKWAREx_transferred
• ADV-2009-3316 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 264828 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2009-0696](https://trackcve.app/badge/CVE-2009-0696.svg)](https://trackcve.app/cve/CVE-2009-0696)

Record last updated 23 Dec 2025, 16:54 UTC.