← Vulnerability feed

Vulnerability record · CVE-2007-2926 · published 24 July 2007

CVE-2007-2926: Isc bind vulnerability

Isc · Bind

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

4.3 CVSS 2.0 Medium EPSS 13% · top 3.8%
4.3CVSS 2.0 base score
13%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
134References
16 Jun 2026Last modified by NVD

Description

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://aix.software.ibm.com/aix/efixes/security/README
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc
http://docs.info.apple.com/article.html?artnum=307041
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
http://marc.info/?l=bugtraq&m=141879471518471&w=2
http://secunia.com/advisories/26148
http://secunia.com/advisories/26152 Vendor Advisory
http://secunia.com/advisories/26160
http://secunia.com/advisories/26180
http://secunia.com/advisories/26195
http://secunia.com/advisories/26217
http://secunia.com/advisories/26227
http://secunia.com/advisories/26231
http://secunia.com/advisories/26236
http://secunia.com/advisories/26261
http://secunia.com/advisories/26308
http://secunia.com/advisories/26330
http://secunia.com/advisories/26509
http://secunia.com/advisories/26515
http://secunia.com/advisories/26531
http://secunia.com/advisories/26605
http://secunia.com/advisories/26607
http://secunia.com/advisories/26847
http://secunia.com/advisories/26925
http://secunia.com/advisories/27643
http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1
http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only
http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only
http://www.debian.org/security/2007/dsa-1341
http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml
http://www.isc.org/index.pl?/sw/bind/bind-security.php
http://www.kb.cert.org/vuls/id/252735 US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:149
http://www.novell.com/linux/security/advisories/2007_47_bind.html

Track CVE-2007-2926 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-0122Isc bind vulnerabilityOff-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows…EPSS 12%10.0CVE-2001-0010Isc bind vulnerabilityBuffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.EPSS 32%10.0CVE-2001-0011Isc bind vulnerabilityBuffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.EPSS 7.7%10.0CVE-2001-0013Isc bind vulnerabilityFormat string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.EPSS 11%10.0CVE-2000-1029Isc bind vulnerabilityBuffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.EPSS 14%10.0CVE-1999-0837Isc bind vulnerabilityDenial of service in BIND by improperly closing TCP sessions via so_linger.EPSS 2.7%10.0CVE-1999-0009Data general dg ux vulnerabilityInverse query buffer overflow in BIND 4.9 and BIND 8 Releases.EPSS 29%9.8CVE-2026-3593Isc bind use after free vulnerabilityA use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 thr…EPSS 1.1%

Source: NIST National Vulnerability Database (record CVE-2007-2926), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.