CVE-2005-0034: ISC BIND

Medium severity, CVSS 4.3. EPSS: 6.4% chance of exploitation in the next 30 days.

An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail.

Affected products

• ISC BIND: version 9.3.0 only

Published 2005-05-02. Last modified 2026-06-16.