ISC bind named DNS server DoS
Published:		30.05.2011
Source:		BUGTRAQ
SecurityVulns ID:		11701
Type:		remote
Level:		7/10
Description:		Large RRSIG in negative response leads to assert().

Affected:		ISC : bind 9.6
		BIND : bind 9.7
		BIND : bind 9.8
CVE:		CVE-2011-1910 (Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.)

Original document

FREEBSD, FreeBSD Security Advisory FreeBSD-SA-11:02.bind (30.05.2011)

Discuss:

Read or add your comments to this news (0 comments)