{"id":"CVE-2008-0122","state":"PUBLISHED","title":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to","description":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.","publishedAt":"2008-01-16T01:00:00.000Z","updatedAt":"2024-08-07T07:32:24.383Z","severity":null,"assigner":"freebsd","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://secunia.com/advisories/28579","https://bugzilla.redhat.com/show_bug.cgi?id=429149","http://www.redhat.com/support/errata/RHSA-2008-0300.html","http://www.securityfocus.com/bid/27283","http://secunia.com/advisories/30538","http://www.securityfocus.com/archive/1/487000/100/0/threaded","http://www.kb.cert.org/vuls/id/203611","http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc","http://www.vupen.com/english/advisories/2008/0703","http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm","http://www.vupen.com/english/advisories/2008/1743/references","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190","https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html","http://secunia.com/advisories/28429","https://issues.rpath.com/browse/RPL-2169","http://www.securitytracker.com/id?1019189","http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow","http://secunia.com/advisories/28487","http://www.isc.org/index.pl?/sw/bind/bind-security.php","https://exchange.xforce.ibmcloud.com/vulnerabilities/39670","http://secunia.com/advisories/30313","http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167","http://secunia.com/advisories/30718","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","http://secunia.com/advisories/29323","http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1","http://secunia.com/advisories/29161","http://www.vupen.com/english/advisories/2008/0193","http://secunia.com/advisories/28367","https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:38:44.978Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2008/0xxx/CVE-2008-0122.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2008-0122","state":"PUBLISHED","datePublished":"2008-01-16T01:00:00.000Z","dateUpdated":"2024-08-07T07:32:24.383Z","assignerShortName":"freebsd","assignerOrgId":"63664ac6-956c-4cba-a5d0-f46076e16109","dateReserved":"2008-01-07T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://secunia.com/advisories/28579","name":"28579","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429149","tags":["x_refsource_CONFIRM"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0300.html","name":"RHSA-2008:0300","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/27283","name":"27283","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/30538","name":"30538","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/487000/100/0/threaded","name":"20080124 rPSA-2008-0029-1 bind bind-utils","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.kb.cert.org/vuls/id/203611","name":"VU#203611","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc","name":"FreeBSD-SA-08:02","tags":["vendor-advisory","x_refsource_FREEBSD"]},{"url":"http://www.vupen.com/english/advisories/2008/0703","name":"ADV-2008-0703","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2008/1743/references","name":"ADV-2008-1743","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190","name":"oval:org.mitre.oval:def:10190","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html","name":"FEDORA-2008-0904","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://secunia.com/advisories/28429","name":"28429","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://issues.rpath.com/browse/RPL-2169","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id?1019189","name":"1019189","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","name":"SUSE-SR:2008:006","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/28487","name":"28487","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39670","name":"freebsd-inetnetwork-bo(39670)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://secunia.com/advisories/30313","name":"30313","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/30718","name":"30718","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/29323","name":"29323","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1","name":"238493","tags":["vendor-advisory","x_refsource_SUNALERT"]},{"url":"http://secunia.com/advisories/29161","name":"29161","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0193","name":"ADV-2008-0193","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/advisories/28367","name":"28367","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html","name":"FEDORA-2008-0903","tags":["vendor-advisory","x_refsource_FEDORA"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"freebsd","dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"63664ac6-956c-4cba-a5d0-f46076e16109"},"datePublic":"2008-01-14T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secteam@freebsd.org","ID":"CVE-2008-0122","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"28579","refsource":"SECUNIA","url":"http://secunia.com/advisories/28579"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=429149","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=429149"},{"name":"RHSA-2008:0300","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2008-0300.html"},{"name":"27283","refsource":"BID","url":"http://www.securityfocus.com/bid/27283"},{"name":"30538","refsource":"SECUNIA","url":"http://secunia.com/advisories/30538"},{"name":"20080124 rPSA-2008-0029-1 bind bind-utils","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/487000/100/0/threaded"},{"name":"VU#203611","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/203611"},{"name":"FreeBSD-SA-08:02","refsource":"FREEBSD","url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc"},{"name":"ADV-2008-0703","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/0703"},{"name":"http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm","refsource":"CONFIRM","url":"http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm"},{"name":"ADV-2008-1743","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1743/references"},{"name":"oval:org.mitre.oval:def:10190","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190"},{"name":"FEDORA-2008-0904","refsource":"FEDORA","url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html"},{"name":"28429","refsource":"SECUNIA","url":"http://secunia.com/advisories/28429"},{"name":"https://issues.rpath.com/browse/RPL-2169","refsource":"CONFIRM","url":"https://issues.rpath.com/browse/RPL-2169"},{"name":"1019189","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1019189"},{"name":"SUSE-SR:2008:006","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html"},{"name":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow","refsource":"CONFIRM","url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow"},{"name":"28487","refsource":"SECUNIA","url":"http://secunia.com/advisories/28487"},{"name":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","refsource":"CONFIRM","url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php"},{"name":"freebsd-inetnetwork-bo(39670)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39670"},{"name":"30313","refsource":"SECUNIA","url":"http://secunia.com/advisories/30313"},{"name":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167","refsource":"CONFIRM","url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167"},{"name":"30718","refsource":"SECUNIA","url":"http://secunia.com/advisories/30718"},{"name":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","refsource":"CONFIRM","url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488"},{"name":"29323","refsource":"SECUNIA","url":"http://secunia.com/advisories/29323"},{"name":"238493","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1"},{"name":"29161","refsource":"SECUNIA","url":"http://secunia.com/advisories/29161"},{"name":"ADV-2008-0193","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/0193"},{"name":"28367","refsource":"SECUNIA","url":"http://secunia.com/advisories/28367"},{"name":"FEDORA-2008-0903","refsource":"FEDORA","url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://secunia.com/advisories/28579","name":"28579","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=429149","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0300.html","name":"RHSA-2008:0300","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/27283","name":"27283","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/30538","name":"30538","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/487000/100/0/threaded","name":"20080124 rPSA-2008-0029-1 bind bind-utils","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/203611","name":"VU#203611","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc","name":"FreeBSD-SA-08:02","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/0703","name":"ADV-2008-0703","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/1743/references","name":"ADV-2008-1743","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190","name":"oval:org.mitre.oval:def:10190","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html","name":"FEDORA-2008-0904","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://secunia.com/advisories/28429","name":"28429","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://issues.rpath.com/browse/RPL-2169","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id?1019189","name":"1019189","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html","name":"SUSE-SR:2008:006","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/28487","name":"28487","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39670","name":"freebsd-inetnetwork-bo(39670)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/30313","name":"30313","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/30718","name":"30718","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/29323","name":"29323","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1","name":"238493","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"]},{"url":"http://secunia.com/advisories/29161","name":"29161","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/0193","name":"ADV-2008-0193","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/28367","name":"28367","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00781.html","name":"FEDORA-2008-0903","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T07:32:24.383Z"}}]}}}