Bind vulnerability

2011-02-2300:00:00

ubuntu.com

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.1

Confidence

Low

EPSS

0.094

Percentile

94.8%

JSON

Releases

Ubuntu 10.10

Packages

bind9 -

Details

It was discovered that Bind incorrectly handled IXFR transfers and dynamic
updates while under heavy load when used as an authoritative server. A
remote attacker could use this flaw to cause Bind to stop responding,
resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu10.10noarchlibdns66< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchbind9< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchbind9-host< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchbind9utils< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchdnsutils< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchlibbind-dev< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchlibbind9-60< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchlibisc60< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchlibisccc60< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN
Ubuntu10.10noarchlibisccfg60< 1:9.7.1.dfsg.P2-2ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	10.10	noarch	libdns66	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	bind9	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	bind9-host	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	bind9utils	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	dnsutils	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	libbind-dev	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	libbind9-60	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	libisc60	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	libisccc60	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN
Ubuntu	10.10	noarch	libisccfg60	< 1:9.7.1.dfsg.P2-2ubuntu0.2	UNKNOWN