Denial Of Service (Dos)

2019-01-1508:54:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

bind is vulnerable to denial of service. An uninitialized data structure is used when DNSSEC validation was enabled, allowing a remote attacker to send a large number of queries to a DNSSEC validating BIND resolver to cause it to exit unexpectedly with an assertion failure.

CPENameOperatorVersion
bind97eq9.7.0__6.P2.el5_6.2
bind97eq9.7.0__6.P2.el5
bind97eq9.7.0__6.P2.el5_7.4
bind97eq9.7.0__6.P2.el5_6.1
bind97eq9.7.0__6.P2.el5_6.3
bindeq9.3.3__7.el5
bindeq9.3.6__16.P1.el5_7.1
bindeq9.3.6__4.P1.el5_5.3
bindeq9.3.4__6.0.3.P1.el5_2
bindeq9.3.3__8.el5

Name	Operator	Version
bind97	eq	9.7.0__6.P2.el5_6.2
bind97	eq	9.7.0__6.P2.el5
bind97	eq	9.7.0__6.P2.el5_7.4
bind97	eq	9.7.0__6.P2.el5_6.1
bind97	eq	9.7.0__6.P2.el5_6.3
bind	eq	9.3.3__7.el5
bind	eq	9.3.6__16.P1.el5_7.1
bind	eq	9.3.6__4.P1.el5_5.3
bind	eq	9.3.4__6.0.3.P1.el5_2
bind	eq	9.3.3__8.el5