PT-2015-7052 · Isc+8 · Isc Bind 9.X+8

Hanno Böck · Publicado 2015-09-02 · Atualizado 2024-06-15 · CVE-2015-5722

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND 9.x versions 9.9.0 through 9.9.7-P2 ISC BIND 9.x version 9.10.0 through 9.10.2-P3

Description The issue allows remote attackers to cause a denial of service by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone. This results in an assertion failure and daemon exit.

Recommendations For ISC BIND 9.x versions 9.9.0 through 9.9.7-P2, update to version 9.9.7-P3 or later. For ISC BIND 9.x versions 9.10.0 through 9.10.2-P3, update to version 9.10.2-P4 or later.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-1055

CESA-2015_1705

CVE-2015-5722

DLA-308-1

DSA-3350-1

HPSBUX03511

MGASA-2015-0341

OPENSUSE-SU-2015_1597-1

OPENSUSE-SU-2024:10467-1

RHSA-2015:1705

RHSA-2015:1706

RHSA-2015:1707

RHSA-2015_1705

RHSA-2015_1706

RHSA-2015_1707

RHSA-2016:0078

RHSA-2016:0079

SUSE-SU-2015:1480-1

SUSE-SU-2015:1481-1

SUSE-SU-2015:1496-1

SUSE-SU-2015_1480-1

SUSE-SU-2015_1481-1

SUSE-SU-2015_1496-1

USN-2728-1

Produtos afetados

Alt Linux

Bind Server

Centos

Hp-Ux

Ibm Aix

Isc Bind 9.X

Red Hat

Suse

Ubuntu

Referências · 139

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb · Exploit
• 🔥 https://github.com/robertdavidgraham/cve-2015-5477 · Exploit
• 🔥 https://github.com/infobyte/CVE-2016-2776 · Exploit
• 🔥 https://github.com/elceef/tkeypoc · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tsig.rb · Nota
• https://errata.altlinux.org/ALT-PU-2017-1055 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-5166 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2776 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-8705 · Nota
• https://security.netapp.com/advisory/ntap-20190730-0001 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-1705.html · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2015-0341 · Aviso do Fabricante
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://osv.dev/vulnerability/SUSE-SU-2015:1496-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-3615 · Nota