CVE-2008-0122: ISC BIND

High severity, CVSS 10.0. EPSS: 12.4% chance of exploitation in the next 30 days.

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

Affected products

• ISC BIND: up to and including 9.4.2

Published 2008-01-16. Last modified 2026-06-16.