Every CVE Search/ Get API key

CVE-2008-0122

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used...

10.0 HighFix available

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Exploit likelihood

12.4%Up 6.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Record
CVE-2008-0122
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Record
CVE-2008-0122
Updated
2026-11-02
EUVDEUVD-2008-0135 No score

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Record
EUVD-2008-0135
Updated
2026-11-03
GitHub AdvisoriesGHSA-qfv4-7qhr-3fj9 No score

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used...

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Record
GHSA-qfv4-7qhr-3fj9
Updated
2026-11-02
OSV No score

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Record
CVE-2008-0122
Updated
2026-11-02
OSVDEBIAN-CVE-2008-0122 No score

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Record
DEBIAN-CVE-2008-0122
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Debian:12
 before 2.2-1
2.2-1
glibc
Debian:13
 before 2.2-1
2.2-1
glibc
Debian:14
 before 2.2-1
2.2-1
bind
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-chroot
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-devel
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-libbind-devel
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
caching-nameserver
Red Hat:enterprise_linux:5::client_workstation
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind
Red Hat:enterprise_linux:5::client
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
Show 13 moreShow less
Affected packages
PackageAffectedFixed
bind-debuginfo
Red Hat:enterprise_linux:5::client
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-libs
Red Hat:enterprise_linux:5::client
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-sdb
Red Hat:enterprise_linux:5::client
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-utils
Red Hat:enterprise_linux:5::client
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-chroot
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-debuginfo
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-devel
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-libbind-devel
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-libs
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-sdb
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
bind-utils
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5
caching-nameserver
Red Hat:enterprise_linux:5::server
 before 30:9.3.4-6.P1.el5
30:9.3.4-6.P1.el5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-0122 is a high vulnerability (CVSS 10.0) in Isc Bind, published January 16, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.4%, the 96th percentile. Fixed in glibc 2.2-1.

References

Show 50 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open