CVE-2009-0696: The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and...

Security readout for executives and security teams

This flaw can make certain old ISC BIND master DNS servers crash when they receive a specially crafted dynamic update. The business impact is service disruption: affected authoritative DNS could stop answering until restarted. The bundle does not show code execution, data theft, CVSS scoring, or confirmed active exploitation. Exposure is most likely on legacy BIND authoritative master servers that accept dynamic update traffic. Organizations using newer BIND versions, non-master configurations, or deployments that do not allow dynamic updates are less likely to be affected based on the supplied description. Prioritize remediation if affected BIND master servers support public or business-critical DNS. For most environments, this is a legacy exposure check rather than an emergency response, because the bundle shows denial of service only and no confirmed active exploitation. Mitigation focus: Identify any BIND 9.4, 9.5, or 9.6 deployments still in service.; Upgrade to at least 9.4.3-P3, 9.5.1-P3, or 9.6.1-P1.; Review vendor advisories for platform-specific backported fixes..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.