Lucene search

K
gentooGentoo FoundationGLSA-201510-01
HistoryOct 18, 2015 - 12:00 a.m.

BIND: Denial of service

2015-10-1800:00:00
Gentoo Foundation
security.gentoo.org
41

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.972 High

EPSS

Percentile

99.8%

Background

BIND (Berkeley Internet Name Domain) is a Name Server.

Description

A vulnerability has been discovered in BIND’s named utility leading to a Denial of Service condition.

Impact

A remote attacker may be able to cause Denial of Service condition via specially constructed zone data.

Workaround

There is no known workaround at this time.

Resolution

All BIND users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-dns/bind-9.10.2_p4"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-dns/bind< 9.10.2_p4UNKNOWN

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.972 High

EPSS

Percentile

99.8%