Описание
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.4.20-1 |
| hardy | DNE | |
| lucid | ignored | end of life |
| maverick | ignored | end of life |
| natty | ignored | end of life |
| oneiric | ignored | end of life |
| precise | not-affected | 1.4.16-1 |
| quantal | not-affected | 1.4.18-1 |
| raring | not-affected | 1.4.19-1ubuntu1 |
| saucy | not-affected | 1.4.20-1 |
Показывать по
Ссылки на источники
6.4 Medium
CVSS2
Связанные уязвимости
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
The resolver in Unbound before 1.4.11 overwrites cached server names a ...
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
6.4 Medium
CVSS2