CVE-2006-4095: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 12% chance of exploitation in the next 30 days.

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.

Affected products

• Apple Mac OS X: before 10.3.9 (fixed in 10.3.9); from 10.4.0, before 10.4.9 (fixed in 10.4.9)
• Apple Mac OS X Server: before 10.3.9 (fixed in 10.3.9); from 10.4.0, before 10.4.9 (fixed in 10.4.9)
• Canonical Ubuntu Linux: version 5.04 only; version 5.10 only; version 6.06 only
• ISC BIND: up to and including 9.2.6; from 9.3.0, up to and including 9.3.2

Published 2006-09-06. Last modified 2026-06-16.