Denial Of Service (DoS)

2019-01-1508:51:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

Libdns.so is vulnerable to denial of service attack. The library does not use correct regular expression validation, allowing the attack to inject a malicious DNS query causing an excessive amount of memory, or application crash.

CPENameOperatorVersion
bind97eq9.7.0__10.P2.el5_8.3
bind97eq9.7.0__6.P2.el5_6.2
bind97eq9.7.0__10.P2.el5_8.1
bind97eq9.7.0__6.P2.el5_6.3
bind97eq9.7.0__10.P2.el5_8.2
bind97eq9.7.0__6.P2.el5
bind97eq9.7.0__6.P2.el5_7.4
bind97eq9.7.0__10.P2.el5_8.4
bind97eq9.7.0__6.P2.el5_6.1
bind97eq9.7.0__10.P2.el5_8.5

Name	Operator	Version
bind97	eq	9.7.0__10.P2.el5_8.3
bind97	eq	9.7.0__6.P2.el5_6.2
bind97	eq	9.7.0__10.P2.el5_8.1
bind97	eq	9.7.0__6.P2.el5_6.3
bind97	eq	9.7.0__10.P2.el5_8.2
bind97	eq	9.7.0__6.P2.el5
bind97	eq	9.7.0__6.P2.el5_7.4
bind97	eq	9.7.0__10.P2.el5_8.4
bind97	eq	9.7.0__6.P2.el5_6.1
bind97	eq	9.7.0__10.P2.el5_8.5