Veracode Vulnerability DatabaseVERACODE:13082Denial Of Service (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
bind is vulnerable to denial of service (DoS) attacks. The vulnerability exists as “deny-answer-aliases” is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c.
References
lists.opensuse.org/opensuse-security-announce/2019-06/msg00026.html
lists.opensuse.org/opensuse-security-announce/2019-06/msg00027.html
www.securityfocus.com/bid/105055
www.securitytracker.com/id/1041436
access.redhat.com/errata/RHSA-2018:2570
access.redhat.com/errata/RHSA-2018:2571
access.redhat.com/security/updates/classification/#important
kb.isc.org/article/AA-01639
kb.isc.org/docs/aa-01639
lists.debian.org/debian-lts-announce/2018/08/msg00033.html
lists.debian.org/debian-lts-announce/2021/11/msg00001.html
security.gentoo.org/glsa/201903-13
security.netapp.com/advisory/ntap-20180926-0003/
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03927en_us
usn.ubuntu.com/3769-1/
usn.ubuntu.com/3769-2/
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P