Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-0696

Опубликовано: 28 июл. 2009
Источник: redhat
CVSS2: 5
EPSS Средний

Описание

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=514292bind: DoS (assertion failure) via nsupdate packets

EPSS

Процентиль: 97%
0.35784
Средний

5 Medium

CVSS2

Связанные уязвимости

ubuntu
около 16 лет назад

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.

nvd
около 16 лет назад

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.

debian
около 16 лет назад

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 befo ...

github
больше 3 лет назад

The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.

oracle-oval
около 16 лет назад

ELSA-2009-1179: bind security update (IMPORTANT)

EPSS

Процентиль: 97%
0.35784
Средний

5 Medium

CVSS2