Lucene search

K
freebsdFreeBSDCB252F01-7C43-11E3-B0A6-005056A37F68
HistoryJan 08, 2014 - 12:00 a.m.

bind -- denial of service vulnerability

2014-01-0800:00:00
vuxml.freebsd.org
16

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.637 Medium

EPSS

Percentile

97.8%

ISC reports:

Because of a defect in handling queries for NSEC3-signed zones,
BIND can crash with an β€œINSIST” failure in name.c when processing
queries possessing certain properties. By exploiting this defect
an attacker deliberately constructing a query with the right
properties could achieve denial of service against an authoritative
nameserver serving NSEC3-signed zones.

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.637 Medium

EPSS

Percentile

97.8%