Bind vulnerabilities

2007-02-0600:00:00

ubuntu.com

6.1 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.97 High

EPSS

Percentile

99.7%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

A flaw was discovered in Bind’s DNSSEC validation code. Remote
attackers could send a specially crafted DNS query which would cause the
Bind server to crash, resulting in a denial of service. Only servers
configured to use DNSSEC extensions were vulnerable.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibdns21< 1:9.3.2-2ubuntu3.1UNKNOWN
Ubuntu6.06noarchlibdns21< 1:9.3.2-2ubuntu1.2UNKNOWN
Ubuntu5.10noarchlibdns20< 1:9.3.1-2ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	libdns21	< 1:9.3.2-2ubuntu3.1	UNKNOWN
Ubuntu	6.06	noarch	libdns21	< 1:9.3.2-2ubuntu1.2	UNKNOWN
Ubuntu	5.10	noarch	libdns20	< 1:9.3.1-2ubuntu1.2	UNKNOWN