Skip to main content

ISC BIND Denial of Service Vulnerability

Last Update Date: 9 Dec 2014 11:04 Release Date: 9 Dec 2014 3217 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

TYPE: Other Servers

A vulnerability was identified in ISC BIND. A remote user can cause denial of service conditions.

 

Attackers can exploit the defects in delegation handling and GeoIP features to exhaust resource and cause BIND to crash.


Impact

  • Denial of Service

System / Technologies affected

  • Versions 9.0.x - 9.8.x, 9.9.0 - 9.9.6, 9.10.0 - 9.10.1

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued a fix (9.9.6-P1, 9.10.1-P1).

Vulnerability Identifier


Source


Related Link