Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-2088

Опубликовано: 09 мар. 2016
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 4.3
CVSS3: 6.8

Описание

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.

РелизСтатусПримечание
devel

not-affected

1:9.10.3.dfsg.P4-1
esm-infra-legacy/trusty

not-affected

precise

not-affected

trusty

not-affected

trusty/esm

not-affected

upstream

released

9.9.8-P4, 9.10.3-P4
vivid/stable-phone-overlay

not-affected

vivid/ubuntu-core

not-affected

wily

not-affected

1:9.9.5.dfsg-11ubuntu1.2

Показывать по

EPSS

Процентиль: 98%
0.48562
Средний

4.3 Medium

CVSS2

6.8 Medium

CVSS3

Связанные уязвимости

redhat
почти 10 лет назад

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.

CVSS3: 6.8
nvd
почти 10 лет назад

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.

CVSS3: 6.8
debian
почти 10 лет назад

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cook ...

CVSS3: 6.8
github
больше 3 лет назад

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.

fstec
почти 10 лет назад

Уязвимость сервера DNS BIND, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 98%
0.48562
Средний

4.3 Medium

CVSS2

6.8 Medium

CVSS3