Lucene search

K
suseSuseSUSE-SA:2000:45
HistoryNov 16, 2000 - 4:00 p.m.

remote denial of service in bind8

2000-11-1616:00:00
lists.opensuse.org
20

0.034 Low

EPSS

Percentile

90.4%

<p> BIND, the Berkeley Internet Name Daemon, versions before 8.2.2p7, has been found vulnerable to two denial of service attacks: named may crash after a compressed zone transfer request (ZXFR) and if an SRV record (defined in RFC2782) is sent to the server. Administrators testing the ZXFR bug should be aware that it can take several seconds after the triggering the bug until the nameserver daemon crashes. SuSE versions 6.0 through 6.4 are affected by these two problems. The bind8 package in SuSE-7.0 is not affected because a different version of bind8 (8.2.3) was used in this distribution. By the release time of the SuSE-7.0 distribution our engineers have determined that the problems we had with stalling zone transfers under some obscure conditions were not present with the 8.2.3 release of the package.

0.034 Low

EPSS

Percentile

90.4%

Related for SUSE-SA:2000:45