PT-2008-1777 · Freebsd+2 · Freebsd+3

Adam Tkac · Publicado 2008-01-16 · Atualizado 2019-08-01 · CVE-2008-0122

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.4.2 and earlier FreeBSD versions 6.2 through 7.0-PRERELEASE

Description The issue is caused by an off-by-one error in the inet network function in libbind in ISC BIND, which can lead to a denial of service (crash) and potentially allow execution of arbitrary code via crafted input that triggers memory corruption.

Recommendations For ISC BIND versions 9.4.2 and earlier, update to a version later than 9.4.2 to resolve the issue. For FreeBSD versions 6.2 through 7.0-PRERELEASE, consider upgrading to a newer version of FreeBSD that incorporates the fix for the inet network function in libbind.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-0122

RHSA-2008:0300

RHSA-2008_0300

Produtos afetados

Freebsd

Isc Bind

Red Hat

Libbind

Referências · 38

• http://securityfocus.com/archive/1/487000/100/0/threaded · Nota
• http://secunia.com/advisories/29161 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-0122 · Aviso do Fabricante
• http://secunia.com/advisories/30538 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-0122 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm · Nota
• http://redhat.com/support/errata/RHSA-2008-0300.html · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00781.html · Aviso do Fabricante
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 · Nota
• http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2008:0300 · Nota
• http://vupen.com/english/advisories/2008/0193 · Nota
• http://kb.cert.org/vuls/id/203611 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1 · Aviso do Fabricante