Lucene search

K
freebsdFreeBSD72F35727-CE83-11E2-BE04-005056A37F68
HistoryJun 04, 2013 - 12:00 a.m.

dns/bind9* -- A recursive resolver can be crashed by a query for a malformed zone

2013-06-0400:00:00
vuxml.freebsd.org
26

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.5%

ISC reports:

A bug has been discovered in the most recent releases of
BIND 9 which has the potential for deliberate exploitation
as a denial-of-service attack. By sending a recursive
resolver a query for a record in a specially malformed zone,
an attacker can cause BIND 9 to exit with a fatal
“RUNTIME_CHECK” error in resolver.c.

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.5%