PT-2008-1777 · Freebsd+2 · Freebsd+3

Adam Tkac · Published 2008-01-16 · Updated 2019-08-01 · CVE-2008-0122

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.4.2 and earlier FreeBSD versions 6.2 through 7.0-PRERELEASE

Description The issue is caused by an off-by-one error in the inet network function in libbind in ISC BIND, which can lead to a denial of service (crash) and potentially allow execution of arbitrary code via crafted input that triggers memory corruption.

Recommendations For ISC BIND versions 9.4.2 and earlier, update to a version later than 9.4.2 to resolve the issue. For FreeBSD versions 6.2 through 7.0-PRERELEASE, consider upgrading to a newer version of FreeBSD that incorporates the fix for the inet network function in libbind.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-0122

RHSA-2008:0300

RHSA-2008_0300

Affected Products

Freebsd

Isc Bind

Red Hat

Libbind

References · 38

• https://osv.dev/vulnerability/DEBIAN-CVE-2008-0122 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0300.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00781.html · Vendor Advisory
• http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-238493-1 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00782.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0122 · Security Note
• https://osv.dev/vulnerability/CVE-2008-0122 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-0122 · Vendor Advisory
• http://isc.org/index.pl?/sw/bind/bind-security.php · Vendor Advisory
• http://securityfocus.com/bid/27283 · Patch
• http://securityfocus.com/archive/1/487000/100/0/threaded · Note
• http://secunia.com/advisories/29161 · Note
• http://secunia.com/advisories/30538 · Note