PT-2006-4938 · Isc+1 · Bind+1

Joao Damas · Publicado 2006-09-05 · Atualizado 2024-02-15 · CVE-2006-4095

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BIND versions 9.2.x through 9.2.6 and 9.3.x through 9.3.2

Description The issue allows a remote attacker to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.

Recommendations For versions 9.2.x through 9.2.6, update to version 9.2.6-P1 or later. For versions 9.3.x through 9.3.2, update to version 9.3.2-P1 or later.

Correção

DoS

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

CVE-2006-4095

DSA-1172-1

Produtos afetados

Bind

Bind Server

Referências · 45

• http://security.gentoo.org/glsa/glsa-200609-11.xml · Aviso do Fabricante
• http://docs.info.apple.com/article.html?artnum=305530 · Nota
• http://ubuntu.com/usn/usn-343-1 · Aviso do Fabricante
• http://secunia.com/advisories/21926 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4095 · Nota de Segurança
• http://secunia.com/advisories/21818 · Nota
• http://vupen.com/english/advisories/2007/1401 · Nota
• http://secunia.com/advisories/24950 · Nota
• https://osv.dev/vulnerability/CVE-2006-4095 · Aviso do Fabricante
• http://secunia.com/advisories/25402 · Nota
• http://novell.com/linux/security/advisories/2006_24_sr.html · Aviso do Fabricante
• http://us.debian.org/security/2006/dsa-1172 · Aviso do Fabricante
• http://secunia.com/advisories/21752 · Nota
• http://xforce.iss.net/xforce/xfdb/28745 · Nota
• http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc · Aviso do Fabricante