The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecified attributes.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Dns Bind | — | Upgrade ISC BIND to latest version | May 12, 2014 | May 8, 2014 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | May 8, 2014 |
| Suse | — | Upgrade bind-utilsUpgrade bind-chrootenvUpgrade libirs1601Upgrade libisccfg1600Upgrade libisccc1600Upgrade bind-develUpgrade bind-docUpgrade libirs160Upgrade libisc1606Upgrade libisccc160Upgrade liblwres160Upgrade libdns1605Upgrade libbind9-1600Upgrade libirs-develUpgrade python3-bindUpgrade libisccfg160Upgrade libbind9-160Upgrade libns1604Upgrade bindUpgrade libisc166Upgrade libdns169 | May 20, 2018 | May 8, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub