MALWARELIST.net – Your Information Security Source

ISC BIND Vulnerability

Vulnerability: Denial of service in ISC BIND

Danger: Medium
Patch: Yes
Number of vulnerabilities: 1

CVE ID: CVE-2012-4244
Vector of operation: Remote
Impact: Denial of service

Affected products:

ISC BIND 9.9.x, 9.8.x, 9.7.x, 9.6.x, 9.5.x, 9.2.x, 9.4.x, 9.3.x

Affected versions:
ISC BIND versions 9.0.x to 9.6.x, 9.4-ESV to 9.4-ESV-R5-P1, 9.6-ESV to 9.6-ESV-R7-P2, from 9.7.0 to 9.7.6-P2, from 9.8.0 to 9.8.3-P2, from 9.9.0 to 9.9.1-P2

Description:

Which can be exploited by malicious people to a DoS attack

An error in the processing of data RDATA long chem65535 more bytes. A remote user can send a specially crafted request to the recursive server to crash his work.

Manufacturer URL: https://www.isc.org/

Solution: To resolve the vulnerability install the product, version 9.7.7, 9.7.6-P3, 9.6-ESV-R8, 9.6-ESV-R7-P3, 9.8.4, 9.8.3-P3, 9.9.2 or 9.9.1, P3 from the manufacturer.

links:

https://kb.isc.org/article/AA-00778/74