PT-2012-5019 · Isc+4 · Isc Bind+4

Einar Lonn

·

Publicado

2012-07-25

·

Atualizado

2024-06-15

·

CVE-2012-3817

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.4.x through 9.7.x before 9.7.6-P2 ISC BIND versions 9.8.x before 9.8.3-P2 ISC BIND versions 9.9.x before 9.9.1-P2 ISC BIND 9.6-ESV before 9.6-ESV-R7-P2
Description The issue occurs when DNSSEC validation is enabled and the failing-query cache is not properly initialized, allowing remote attackers to cause a denial of service by sending many queries, resulting in an assertion failure and daemon exit.
Recommendations For ISC BIND versions 9.4.x through 9.7.x before 9.7.6-P2, update to version 9.7.6-P2 or later. For ISC BIND versions 9.8.x before 9.8.3-P2, update to version 9.8.3-P2 or later. For ISC BIND versions 9.9.x before 9.9.1-P2, update to version 9.9.1-P2 or later. For ISC BIND 9.6-ESV before 9.6-ESV-R7-P2, update to version 9.6-ESV-R7-P2 or later.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2012_1123
CVE-2012-3817
DSA-2517-1
OPENSUSE-SU-2024:10467-1
RHSA-2012:1122
RHSA-2012:1123
RHSA-2012_1122
RHSA-2012_1123
SUSE-SU-2012_1048-1
SUSE-SU-2012_1048-2
SUSE-SU-2012_1048-3
SUSE-SU-2015:0011-2
SUSE-SU-2015:0480-1

Produtos afetados

Bind Server
Centos
Isc Bind
Red Hat
Suse