PT-2007-1954 · Isc+1 · Isc Bind+1

Mark Andrews · Publicado 2007-01-25 · Atualizado 2017-10-11 · CVE-2007-0494

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.0.x through 9.5.0a1

Description The issue allows remote attackers to cause a denial of service via a type * (ANY) DNS query response that contains multiple RRsets, triggering an assertion error.

Recommendations For versions 9.0.x through 9.5.0a1, update to a version that is not affected by this issue to prevent remote attackers from causing a denial of service.

Correção

DoS

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2007-0494

DSA-1254-1

HPSBUX02219

RHSA-2007:0044

RHSA-2007:0057

RHSA-2007_0044

RHSA-2007_0057

Produtos afetados

Isc Bind

Red Hat

Referências · 81

• http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619 · Aviso do Fabricante
• http://secunia.com/advisories/27706 · Nota
• http://lists.apple.com/archives/security-announce/2007/May/msg00004.html · Aviso do Fabricante
• http://fedoranews.org/cms/node/2537 · Aviso do Fabricante
• http://secunia.com/advisories/24284 · Nota
• http://marc.info/?l=bind-announce&m=116968519300764&w=2 · Nota
• https://issues.rpath.com/browse/RPL-989 · Nota
• http://vupen.com/english/advisories/2007/1939 · Nota
• http://securityfocus.com/bid/22231 · Nota
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-418-1 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2007-0044.html · Aviso do Fabricante
• http://secunia.com/advisories/26909 · Nota
• http://secunia.com/advisories/25402 · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc · Aviso do Fabricante