PT-2017-9976 · Isc+5 · Isc Bind+5

Publicado

2017-01-11

·

Atualizado

2018-09-27

·

CVE-2016-9147

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1
Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit, via a response containing an inconsistency among the DNSSEC-related RRsets.
Recommendations For ISC BIND version 9.9.9-P4, update to a version that includes the fix for this issue. For ISC BIND version 9.9.9-S6, update to a version that includes the fix for this issue. For ISC BIND version 9.10.4-P4, update to a version that includes the fix for this issue. For ISC BIND version 9.11.0-P1, update to a version that includes the fix for this issue.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2017_0062
CESA-2017_0063
CVE-2016-9147
DLA-805-1
DSA-3758-1
MGASA-2017-0478
OPENSUSE-SU-2017_0182-1
OPENSUSE-SU-2017_0193-1
RHSA-2017:0062
RHSA-2017:0063
RHSA-2017:0064
RHSA-2017:1582
RHSA-2017:1583
RHSA-2017_0062
RHSA-2017_0063
RHSA-2017_0064
SUSE-SU-2017:0111-1
SUSE-SU-2017:0112-1
SUSE-SU-2017:0113-1
USN-3172-1

Produtos afetados

Bind Server
Centos
Isc Bind
Red Hat
Suse
Ubuntu