{"id":"CVE-2008-0122","aliases":["DEBIAN-CVE-2008-0122","EUVD-2008-0135","GHSA-qfv4-7qhr-3fj9","RHSA-2008:0300"],"status":"published","title":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used...","description":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.12399,"percentile":0.96235,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2008-01-16T01:00:00Z","modified":"2026-10-23T17:47:43Z","fixes":[{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.2-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"bind-libbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"caching-nameserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-libbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"caching-nameserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30:9.3.4-6.P1.el5"}]}],"bundled":2}],"products":[{"vendor":"isc","product":"bind"}],"references":[{"url":"http://secunia.com/advisories/28579","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429149","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0300.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/27283","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","Third Party Advisory","VDB Entry","advisory","fix"]},{"url":"http://secunia.com/advisories/30538","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/archive/1/487000/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/203611","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.vupen.com/english/advisories/2008/0703","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1743/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/28429","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2169","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id?1019189","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7\u0026heading=AIX61\u0026path=/200802/SECURITY/20080227/datafile123640\u0026label=AIX%20libc%20inet_network%20buffer%20overflow","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/28487","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39670","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://secunia.com/advisories/30313","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18\u0026ID=4167","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/30718","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/29323","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/29161","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0193","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","report"]},{"url":"http://secunia.com/advisories/28367","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0122","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qfv4-7qhr-3fj9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-0122","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0300","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=240788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=240876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=242734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=247486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=250118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=250744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=250901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=251528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=252334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=253537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=353741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=363531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=419421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=423741","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0300.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-6283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-6283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6283","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0122","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-0122","description":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.","status":"published","published":"2008-01-16T01:00:00Z","modified":"2024-08-07T07:32:24.383Z","updated_at":"2026-11-02T14:34:48.867091Z"}],"euvd":[{"id":"EUVD-2008-0135","description":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.","status":"published","published":"2008-01-16T01:00:00Z","modified":"2024-08-07T07:32:24Z","updated_at":"2026-11-03T01:39:07.248677Z"}],"ghsa":[{"id":"GHSA-qfv4-7qhr-3fj9","title":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used...","description":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.","status":"published","published":"2022-05-01T23:27:45Z","modified":"2023-01-31T05:05:34Z","updated_at":"2026-11-02T14:48:52.878887Z"}],"nvd":[{"id":"CVE-2008-0122","description":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.","status":"published","published":"2008-01-16T02:00:00Z","modified":"2026-06-16T22:48:59.15Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:01:24.89535Z"}],"osv":[{"id":"CVE-2008-0122","description":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.","status":"published","published":"2008-01-16T02:00:00Z","modified":"2026-04-10T03:39:32.288501Z","updated_at":"2026-11-02T15:43:57.178433Z"},{"id":"DEBIAN-CVE-2008-0122","description":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.","status":"published","published":"2008-01-16T02:00:00Z","modified":"2026-10-23T17:47:43.40709364Z","updated_at":"2026-11-02T15:45:23.411908Z"},{"id":"RHSA-2008:0300","title":"Red Hat Security Advisory: bind security, bug fix, and enhancement update","status":"published","published":"2024-09-15T17:04:54Z","modified":"2026-06-26T12:17:59.307962586Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}