Denial of service in ISC BIND

Posted: November 24, 2012 in Vulnerabilities
Tags: , ,

Vulnerability

ISC BIND Vulnerability

Vulnerability: Denial of service in ISC BIND

Danger: Low
Patch: Yes
Number of vulnerabilities: 1

CVE ID: CVE-2012-5166
Vector of operation: Remote
Impact: Denial of service

Affected products: ISC BIND 9.6.x, 9.7.x, 9.8.x, 9.9.x

Affected versions: ISC BIND versions prior to 9.7.7, 9.7.6-P4, 9.6-ESV-R8, 9.6-ESV-R7-P4, 9.8.4, 9.8.3-P4, 9.9.2 and 9.9.1-P4

Description:

The vulnerability allows a remote user to cause a denial of service application.

An error in the processing of requests to a particular type of records. This can be exploited to crash the daemon. Successful exploitation of this vulnerability requires that a combination of RDATA name server was loaded from cache or authoritative name server.

Manufacturer URL: https://www.isc.org/software/bind

Solution: Install the latest version from the manufacturer.

links:

https://kb.isc.org/article/AA-00801

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s