Description
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."
Metrics
CVSS 3.1 6.8/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.htmlTechnical Description
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401Third Party Advisory
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520Broken Link
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368Broken Link
- http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.htmlMailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.htmlMailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.htmlMailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.htmlMailing List, Third Party Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.htmlBroken Link
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlThird Party Advisory
- http://marc.info/?l=bugtraq&m=121630706004256&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=121866517322103&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=123324863916385&w=2Third Party Advisory
- http://marc.info/?l=bugtraq&m=141879471518471&w=2Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2008-0533.htmlThird Party Advisory
- http://secunia.com/advisories/30925Third Party Advisory
- http://secunia.com/advisories/30973Third Party Advisory
- http://secunia.com/advisories/30977Third Party Advisory
- http://secunia.com/advisories/30979Third Party Advisory
- http://secunia.com/advisories/30980Third Party Advisory
- http://secunia.com/advisories/30988Third Party Advisory, Vendor Advisory
- http://secunia.com/advisories/30989Vendor Advisory
- http://secunia.com/advisories/30998Third Party Advisory
- http://secunia.com/advisories/31011Third Party Advisory
- http://secunia.com/advisories/31012Third Party Advisory
- http://secunia.com/advisories/31014Third Party Advisory
- http://secunia.com/advisories/31019Third Party Advisory
- http://secunia.com/advisories/31022Third Party Advisory
- http://secunia.com/advisories/31030Third Party Advisory
- http://secunia.com/advisories/31031Third Party Advisory
- http://secunia.com/advisories/31033Vendor Advisory
- http://secunia.com/advisories/31052Vendor Advisory
- http://secunia.com/advisories/31065Third Party Advisory
- http://secunia.com/advisories/31072Third Party Advisory
- http://secunia.com/advisories/31093Third Party Advisory
- http://secunia.com/advisories/31094Vendor Advisory
- http://secunia.com/advisories/31137Vendor Advisory
- http://secunia.com/advisories/31143Third Party Advisory
- http://secunia.com/advisories/31151Third Party Advisory
- http://secunia.com/advisories/31152Third Party Advisory
- http://secunia.com/advisories/31153Third Party Advisory
- http://secunia.com/advisories/31169Third Party Advisory
- http://secunia.com/advisories/31197Vendor Advisory
- http://secunia.com/advisories/31199Third Party Advisory
- http://secunia.com/advisories/31204Third Party Advisory
- http://secunia.com/advisories/31207Vendor Advisory
- http://secunia.com/advisories/31209Third Party Advisory
- http://secunia.com/advisories/31212Third Party Advisory
- http://secunia.com/advisories/31213Third Party Advisory
- http://secunia.com/advisories/31221Third Party Advisory
- http://secunia.com/advisories/31236Third Party Advisory
- http://secunia.com/advisories/31237Vendor Advisory
- http://secunia.com/advisories/31254Vendor Advisory
- http://secunia.com/advisories/31326Third Party Advisory
- http://secunia.com/advisories/31354Third Party Advisory
- http://secunia.com/advisories/31422Third Party Advisory
- http://secunia.com/advisories/31430Third Party Advisory
- http://secunia.com/advisories/31451Third Party Advisory
- http://secunia.com/advisories/31482Third Party Advisory
Timeline
- Published
- Jul 8, 2008
- Last modified
- Jun 16, 2026
- NVD status
- Modified