CVE-2006-4096

Publication date 6 September 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.

Status

Package Ubuntu Release Status
bind9 7.04 feisty
Fixed in 9.3.4-2ubuntu2.1
6.10 edgy
Fixed in 9.3.2-2ubuntu3.2
6.06 LTS dapper
Fixed in 9.3.2-2ubuntu1.3

References

Related Ubuntu Security Notices (USN)

    • USN-343-1
    • bind9 vulnerabilities
    • 8 September 2006

Other references

Access our resources on patching vulnerabilities