PT-2017-10139 · Isc+6 · Isc Bind 9.X+6

Publicado

2017-01-11

·

Atualizado

2018-09-27

·

CVE-2016-9444

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ISC BIND 9.x versions 9.9.9 through 9.9.9-P4 ISC BIND 9.x versions 9.10.x through 9.10.4-P4 ISC BIND 9.x versions 9.11.x through 9.11.0-P1
Description The issue allows remote attackers to cause a denial of service via a crafted DS resource record in an answer, leading to an assertion failure and daemon exit.
Recommendations For ISC BIND 9.x versions 9.9.9 through 9.9.9-P4, update to version 9.9.9-P5 or later. For ISC BIND 9.x versions 9.10.x through 9.10.4-P4, update to version 9.10.4-P5 or later. For ISC BIND 9.x versions 9.11.x through 9.11.0-P1, update to version 9.11.0-P2 or later.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-1055
CESA-2017_0062
CVE-2016-9444
DLA-805-1
DSA-3758-1
MGASA-2017-0478
OPENSUSE-SU-2017_0182-1
OPENSUSE-SU-2017_0193-1
RHSA-2017:0062
RHSA-2017:1583
RHSA-2017_0062
SUSE-SU-2017:0111-1
SUSE-SU-2017:0112-1
SUSE-SU-2017:0113-1
USN-3172-1

Produtos afetados

Alt Linux
Bind Server
Centos
Isc Bind 9.X
Red Hat
Suse
Ubuntu