Lucene search

K
osvGoogleOSV:DLA-48-1
HistorySep 05, 2014 - 12:00 a.m.

bind9 - security update

2014-09-0500:00:00
Google
osv.dev
12

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

Fix denial of service attack when processing NSEC3-signed zone
queries, fixed by not calling memcpy with overlapping ranges in
bin/named/query.c. - patch backported from 9.8.6-P2 by Marc Deslauriers
from the Ubuntu Security team for USN-2081-1.

For Debian 6 Squeeze, these issues have been fixed in bind9 version 9.7.3.dfsg-1~squeeze12

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P