PT-2014-3695 · Isc+6 · Isc Bind+6

Publicado

2014-01-14

·

Atualizado

2024-06-15

·

CVE-2014-0591

CVSS v2.0

2.6

Baixa

VetorAV:N/AC:H/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.6 through 9.8 before 9.8.6-P2 ISC BIND versions 9.9 before 9.9.4-P2 ISC BIND 9.6-ESV before 9.6-ESV-R10-P2
Description The issue allows remote attackers to cause a denial of service via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature. This is due to a problem in the query findclosestnsec3 function.
Recommendations For ISC BIND versions 9.6 through 9.8 before 9.8.6-P2, update to version 9.8.6-P2 or later. For ISC BIND versions 9.9 before 9.9.4-P2, update to version 9.9.4-P2 or later. For ISC BIND 9.6-ESV before 9.6-ESV-R10-P2, update to version 9.6-ESV-R10-P2 or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-1137
CESA-2014_0043
CVE-2014-0591
DLA-48-1
DSA-3023-1
HPSBUX02961
MGASA-2014-0013
OPENSUSE-SU-2024:10467-1
RHSA-2014:0043
RHSA-2014:1244
RHSA-2014_0043
RHSA-2014_1244
SUSE-SU-2014_0179-1
SUSE-SU-2015:0011-2
SUSE-SU-2015:0480-1
SUSE-SU-2015:1205-1
SUSE-SU-2015_0480-1

Produtos afetados

Alt Linux
Bind Server
Centos
Hp-Ux
Isc Bind
Red Hat
Suse