Six Security Flaws Fixed in BIND 9.9.2

🗓️ 05 Dec 2012 16:15:32Reported by Dennis FisherType

Six Security Flaws Fixed in BIND 9.9.2-P1. A significant update addressing six security vulnerabilities and numerous other bugs. BIND is widely used and maintained by the Internet Systems Consortium, making it an attractive target for attackers aiming to gain privileged access

Reporter	Title	Published	Views	Family All 556
FreeBSD	dns/bind9* -- Heavy DNSSEC Validation Load Can Cause a 'Bad Cache' Assertion Failure	24 Jul 201200:00	–	freebsd
FreeBSD	FreeBSD -- named(8) DNSSEC validation Denial of Service	24 Jul 201200:00	–	freebsd
FreeBSD	dns/bind9* -- zero-length RDATA can cause named to terminate, reveal memory	4 Jun 201200:00	–	freebsd
FreeBSD	dns/bind9* -- servers using DNS64 can be crashed by a crafted query	27 Nov 201200:00	–	freebsd
FreeBSD	FreeBSD -- BIND remote DoS with deliberately crafted DNS64 query	19 Feb 201300:00	–	freebsd
FreeBSD	FreeBSD -- Multiple Denial of Service vulnerabilities with named(8)	22 Nov 201200:00	–	freebsd
FreeBSD	dns/bind9* -- crash on deliberately constructed combination of records	26 Sep 201200:00	–	freebsd
FreeBSD	FreeBSD -- Incorrect handling of zero-length RDATA fields in named(8)	12 Jun 201200:00	–	freebsd
Tenable Nessus	Mac OS X 10.7 < 10.7.5 Multiple Vulnerabilities	21 Sep 201200:00	–	nessus
Tenable Nessus	Mac OS X 10.8 < 10.8.2 Multiple Vulnerabilities	21 Sep 201200:00	–	nessus

Source	Link
kb	www.kb.isc.org/article/AA-00829
rfc-archive	www.rfc-archive.org/getrfc.php

17 Apr 2013 16:31Current

0.7Low risk

Vulners AI Score0.7

EPSS0.36798