PT-2015-7097 · Isc+2 · Isc Bind+2

Publicado

2015-09-04

·

Atualizado

2024-06-15

·

CVE-2015-5986

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.9.7 through 9.9.7-P2 ISC BIND versions 9.10.x through 9.10.2-P3
Description The issue allows remote attackers to cause a denial of service, resulting in a daemon exit, via a crafted DNS response. This occurs due to a REQUIRE assertion failure in the openpgpkey 61.c file in the named component of ISC BIND.
Recommendations For ISC BIND versions 9.9.7 through 9.9.7-P2, update to version 9.9.7-P3 or later. For ISC BIND versions 9.10.x through 9.10.2-P3, update to version 9.10.2-P4 or later.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-1055
CVE-2015-5986
MGASA-2015-0341
OPENSUSE-SU-2024:10467-1

Produtos afetados

Alt Linux
Bind Server
Isc Bind