Lucene search

K
freebsdFreeBSD1E1421F0-8D6F-11E0-89B4-001EC9578670
HistoryMay 26, 2011 - 12:00 a.m.

BIND -- Large RRSIG RRsets and Negative Caching DoS

2011-05-2600:00:00
vuxml.freebsd.org
19

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.943 High

EPSS

Percentile

99.2%

ISC reports:

A BIND 9 DNS server set up to be a caching resolver is
vulnerable to a user querying a domain with very large resource
record sets (RRSets) when trying to negatively cache a response.
This can cause the BIND 9 DNS server (named process) to crash.

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.943 High

EPSS

Percentile

99.2%