Lucene search

K
freebsdFreeBSDFC5231B6-C066-11E1-B5E0-000C299B62E1
HistoryJun 12, 2012 - 12:00 a.m.

FreeBSD -- Incorrect handling of zero-length RDATA fields in named(8)

2012-06-1200:00:00
vuxml.freebsd.org
10

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.904 High

EPSS

Percentile

98.8%

Problem description:

The named(8) server does not properly handle DNS resource records where
the RDATA field is zero length, which may cause various issues for the
servers handling them.
Resolving servers may crash or disclose some portion of memory to the
client. Authoritative servers may crash on restart after transferring a
zone containing records with zero-length RDATA fields. These would
result in a denial of service, or leak of sensitive information.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 7.4UNKNOWN
FreeBSDanynoarchfreebsd< 7.4_9UNKNOWN

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.904 High

EPSS

Percentile

98.8%