Описание
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1:9.10.3.dfsg.P4-1 |
| esm-infra-legacy/trusty | not-affected | 1:9.9.5.dfsg-3ubuntu0.8 |
| esm-infra/xenial | not-affected | 1:9.10.3.dfsg.P4-1 |
| precise | released | 1:9.8.1.dfsg.P1-4ubuntu0.16 |
| precise/esm | not-affected | 1:9.8.1.dfsg.P1-4ubuntu0.16 |
| trusty | released | 1:9.9.5.dfsg-3ubuntu0.8 |
| trusty/esm | not-affected | 1:9.9.5.dfsg-3ubuntu0.8 |
| upstream | released | 9.9.8-P4, 9.10.3-P4 |
| vivid/stable-phone-overlay | ignored | end of life |
| vivid/ubuntu-core | ignored | end of life |
Показывать по
EPSS
4.3 Medium
CVSS2
6.8 Medium
CVSS3
Связанные уязвимости
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does ...
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
Уязвимость сервера DNS BIND, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.3 Medium
CVSS2
6.8 Medium
CVSS3