ISC BIND 9 RPZ配置远程拒绝服务漏洞

BUGTRAQ ID: 48565 CVE ID: CVE-2011-2465 BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND在某些RPZ配置中存在拒绝服务漏洞，远程攻击者可利用此漏洞使受影响应用程序崩溃，造成拒绝服务。 在处理DNAME和CNAME记录时，RPZ功能中存在错误，可被利用终止named进程。如果服务器启用了递归并用包含某些类型记录的RPZ区域配置，则在查询时，BIND受影响版本中的错误可造成named进程退出。 ISC BIND 9.7.1-P2 ISC BIND 9.7.1-P1 ISC BIND...

ISC BIND Response Policy Zones (RPZ) DNAME / CNAME Parsing Remote DoS

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability. If an attacker sends a specially crafted request to a BIND server that has recursion enabled and Response Policy Zones RPZ configured, it may cause the name...

New BIND Release Fixes High-Severity Remote Bugs

The Internet Systems Consortium has released new versions of the ubiquitous BIND server software that fix a pair of vulnerabilities in existing releases, one of which enables an attacker to stop the software from running on remote DNS servers. The high-severity vulnerability in many versions of t...

FreeBSD : BIND -- Remote DoS with certain RPZ configurations (4ccee784-a721-11e0-89b4-001ec9578670)

ISC reports : Two defects were discovered in ISC's BIND 9.8 code. These defects only affect BIND 9.8 servers which have recursion enabled and which use a specific feature of the software known as Response Policy Zones RPZ and where the RPZ zone contains a specific rule/action pattern. %NASLMINLEV...

BIND -- Remote DoS with certain RPZ configurations

ISC reports: Two defects were discovered in ISC's BIND 9.8 code. These defects only affect BIND 9.8 servers which have recursion enabled and which use a specific feature of the software known as Response Policy Zones RPZ and where the RPZ zone contains a specific rule/action pattern...

ISC BIND 9 RPZ zone named denial-of-service vulnerability

Overview ISC BIND 9 contains a remote crashing vulnerability when running with certain RPZ configurations. Description According to ISC:A defect in the affected versions of BIND could cause the "named" process to exit when queried, if the server has recursion enabled and was configured with an RP...

CVE-2011-1907

ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones RPZ RRset replacement is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via an RRSIG query...

CVE-2011-1907

ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones RPZ RRset replacement is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via an RRSIG query...

Design/Logic Flaw

ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones RPZ RRset replacement is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via an RRSIG query...

CVE-2011-1907

ISC BIND 9.x is affected by a DoS vulnerability (CVE-2011-1907) when RPZ RRset replacement is enabled. The issue occurs in the RRSIG query path, causing an assertion failure and daemon exit. Affected versions are BIND 9.x up to but not including 9.8.0-P1 (notably 9.8.x before 9.8.0-P1). The root ...

Remote DoS Flaw in BIND Fixed in New Version !

The Internet Systems Consortium released an advisory today informing BIND users that certain types of queries to name servers can cause the servers to crash and create a denial-of-service condition. This remotely exploitable bug only affects BIND users with the Response Policy Zones RPZ feature...

PT-2011-3468

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.8.x before 9.8.0-P1 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit, via an RRSIG query when Response Policy Zones RPZ RRset replacement is...

ISC BIND Response Policy Zones RRSIG Query Assertion Failure DoS

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability. This issue only affects BIND installations that use the RPZ feature configured for RRset replacement. When RPZ is being used, a query of type RRSIG for a na...

Security Advisory: DNS BIND Security Advisory: RRSIG Queries Can Trigger Server Crash When Using Response Policy Zones

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Note: https://www.isc.org/CVE-2011-1907 is the authoritative source for this Security Advisory. Please check the source for any updates. Summary: When a name server is configured with a response policy zone RPZ, queries for type RRSIG can trigger a...

Remote DoS Flaw in BIND Fixed in New Version

The Internet Systems Consortium released an advisory today informing BIND users that certain types of queries to name servers can cause the servers to crash and create a denial-of-service condition. This remotely exploitable bug only affects BIND users with the Response Policy Zones RPZ feature...