PT-2019-4284 · Isc+6 · Bind+6
Publicado
2019-11-20
·
Atualizado
2024-06-15
·
CVE-2019-6477
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
BIND versions (affected versions not specified)
Description
The issue is related to pipelining in BIND, where each incoming query on a TCP connection requires significant resource allocation. A client using a TCP-pipelined connection could consume more resources than the server is provisioned to handle, leading to the server becoming unresponsive when a TCP connection with multiple pipelined queries is closed. This can be perceived as an intermittent server problem. The vulnerability can be exploited by a remote attacker to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Bind
Bind Server
Centos
Red Hat
Suse
Ubuntu