All vulnerabilitiesServers and applications
CVE-2007-0494 ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.
Severity Medium 4.3
Published 25 Jan 2007
Last changed 16 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 45% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Slow it down
CVSS vector AV:N/AC:M/Au:N/C:N/I:N/A:P
Sources NVD Affected software Software Affected versions BIND 9Servers and applications · cpe:a:isc:bind Version 9.5.0-a1 Version 9.4.0-rc1 Version 9.4.0-b3 Version 9.4.0-b2 All 90 release lines Version 9.0.0-rc1 Version 9.0.0-rc2 Version 9.0.0-rc3 Version 9.0.0-rc4 Version 9.0.0-rc5 Version 9.0.0-rc6 Version 9.0 Version 9.0.1-rc1 Version 9.0.1-rc2 Version 9.0.1 Version 9.1.0-rc1 Version 9.1 Version 9.1.1-rc1 Version 9.1.1-rc2 Version 9.1.1-rc3 Version 9.1.1-rc4 Version 9.1.1-rc5 Version 9.1.1-rc6 Version 9.1.1-rc7 Version 9.1.1 Version 9.1.2-rc1 Version 9.1.2 Version 9.1.3-rc1 Version 9.1.3-rc2 Version 9.1.3-rc3 Version 9.1.3 Version 9.2.0-a1 Version 9.2.0-a2 Version 9.2.0-a3 Version 9.2.0-b1 Version 9.2.0-b2 Version 9.2.0-rc1 Version 9.2.0-rc2 Version 9.2.0-rc3 Version 9.2.0-rc4 Version 9.2.0-rc5 Version 9.2.0-rc6 Version 9.2.0-rc7 Version 9.2.0-rc8 Version 9.2.0-rc9 Version 9.2.0-rc10 Version 9.2 Version 9.2.1-rc1 Version 9.2.1-rc2 Version 9.2.1 Version 9.2.2-rc1 Version 9.2.2 Version 9.2.2-p2 Version 9.2.2-p3 Version 9.2.3-rc1 Version 9.2.3-rc2 Version 9.2.3-rc3 Version 9.2.3-rc4 Version 9.2.3 Version 9.2.4-rc2 Version 9.2.4-rc3 Version 9.2.4-rc4 Version 9.2.4-rc5 Version 9.2.4-rc6 Version 9.2.4-rc7 Version 9.2.4-rc8 Version 9.2.4 Version 9.2.5-b2 Version 9.2.5-rc1 Version 9.2.5 Version 9.2.6-rc1 Version 9.2.6 Version 9.3.0-b2 Version 9.3.0-b3 Version 9.3.0-b4 Version 9.3.0-rc1 Version 9.3.0-rc2 Version 9.3.0-rc3 Version 9.3.0-rc4 Version 9.3 Version 9.3.1-b2 Version 9.3.1-rc1 Version 9.3.1 Version 9.3.2-rc1 Version 9.3.2 Version 9.4.0-a1 Version 9.4.0-a2 Version 9.4.0-a3 Version 9.4.0-a4 Version 9.4.0-a5 Version 9.4.0-b1 Version 9.4.0-b2 Version 9.4.0-b3 Version 9.4.0-rc1 Version 9.5.0-a1
References NVD https://nvd.nist.gov/vuln/detail/CVE-2007-0494 CVE.org https://www.cve.org/CVERecord?id=CVE-2007-0494