2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
Low
0.637 Medium
EPSS
Percentile
97.9%
Jared Mauch discovered that Bind incorrectly handled certain queries for
NSEC3-signed zones. A remote attacker could use this flaw with a specially
crafted query to cause Bind to stop responding, resulting in a denial of
service.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 13.10 | noarch | bind9 | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | bind9-host | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | bind9utils | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | dnsutils | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libbind-dev | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libbind9-90 | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libdns99 | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libisc95 | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libisccc90 | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libisccfg90 | <Β 1:9.9.3.dfsg.P2-4ubuntu1.1 | UNKNOWN |