CVE-2006-4096: ISC BIND

Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days.

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.

Affected products

• ISC BIND: version 9.2.0 only; version 9.2.1 only; version 9.2.2 only; version 9.2.3 only; version 9.2.4 only; version 9.2.5 only; …

Published 2006-09-06. Last modified 2026-06-16.