Описание
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:9.11.3+dfsg-1ubuntu1.2 |
| devel | released | 1:9.11.4+dfsg-3ubuntu4 |
| esm-infra-legacy/trusty | released | 1:9.9.5.dfsg-3ubuntu0.18 |
| esm-infra/bionic | released | 1:9.11.3+dfsg-1ubuntu1.2 |
| esm-infra/xenial | released | 1:9.10.3.dfsg.P4-8ubuntu1.11 |
| precise/esm | not-affected | 1:9.8.1.dfsg.P1-4ubuntu0.26 |
| trusty | released | 1:9.9.5.dfsg-3ubuntu0.18 |
| trusty/esm | released | 1:9.9.5.dfsg-3ubuntu0.18 |
| upstream | needs-triage | |
| xenial | released | 1:9.10.3.dfsg.P4-8ubuntu1.11 |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
"deny-answer-aliases" is a little-used feature intended to help recurs ...
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
EPSS
5 Medium
CVSS2
7.5 High
CVSS3