Description
Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | glibc | 2.2-1 | — |
| Debian 13 | glibc | 2.2-1 | — |
| Debian 12 | glibc | 2.2-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | bind +7 | 30:9.3.4-6.P1.el5 | RHSA-2008:0300 |
Advisories 1
- RHSA-2008:0300 Red Hat Security Advisory: bind security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 28579 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=429149
- RHSA-2008:0300 vendor-advisory
- 27283 vdb-entry
- 30538 third-party-advisory
- 20080124 rPSA-2008-0029-1 bind bind-utils mailing-list
- VU#203611 third-party-advisory
- FreeBSD-SA-08:02 vendor-advisory
- ADV-2008-0703 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm
- ADV-2008-1743 vdb-entry
- oval:org.mitre.oval:def:10190 vdb-entry signature
- FEDORA-2008-0904 vendor-advisory
- 28429 third-party-advisory
- https://issues.rpath.com/browse/RPL-2169
- 1019189 vdb-entry
- SUSE-SR:2008:006 vendor-advisory
- http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow
- 28487 third-party-advisory
- http://www.isc.org/index.pl?/sw/bind/bind-security.php
- freebsd-inetnetwork-bo(39670) vdb-entry
- 30313 third-party-advisory
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167
- 30718 third-party-advisory
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488
- 29323 third-party-advisory
- 238493 vendor-advisory
- 29161 third-party-advisory
- ADV-2008-0193 vdb-entry
- 28367 third-party-advisory
- FEDORA-2008-0903 vendor-advisory