PT-2007-3577 · Isc+1 · Isc Bind+1

Mark Andrews · Publicado 2007-05-02 · Atualizado 2018-10-30 · CVE-2007-2241

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.4.0, and 9.5.0a1 through 9.5.0a3

Description The issue is related to an unspecified vulnerability in the query.c file of ISC BIND. When recursion is enabled, remote attackers can cause a denial of service by sending a sequence of queries that are processed by the query addsoa function, leading to the daemon exiting.

Recommendations For ISC BIND version 9.4.0, update to a version that fixes this issue. For ISC BIND versions 9.5.0a1 through 9.5.0a3, update to a version that fixes this issue. As a temporary workaround, consider disabling recursion to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-2241

Produtos afetados

Bind Server

Isc Bind

Referências · 15

• https://osv.dev/vulnerability/CVE-2007-2241 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2241 · Nota de Segurança
• http://isc.org/sw/bind/bind-security.php · Nota
• http://kb.cert.org/vuls/id/718460 · Nota
• http://securitytracker.com/id?1017985 · Nota
• http://securityfocus.com/bid/23738 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2007:100 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-2241 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2007-2241 · Aviso do Fabricante
• http://secunia.com/advisories/25070 · Aviso do Fabricante
• http://isc.org/index.pl?/sw/bind/bind-security.php · Nota
• http://vupen.com/english/advisories/2007/1593 · Nota
• http://osvdb.org/34748 · Nota
• http://securitylab.ru/vulnerability/295257.php · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33988 · Nota