Denial of service vulnerability in the ISC BIND via failing-query cache| ID: oval:org.secpod.oval:def:15466 | Date: (C)2013-09-20 (M)2023-12-07 |
| Class: VULNERABILITY | Family: macos |
The host is installed with Apple Mac OS X Lion 10.7 through 10.7.5, Mac OS X Mountain Lion 10.8 through 10.8.4 and is prone to denial of service vulnerability. The flaw is present in the ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, which does not properly initialize the failing-query cache. Successful exploitation allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.
| Platform: |
| Apple Mac OS X 10.7 |
| Apple Mac OS X Server 10.7 |
| Apple Mac OS X 10.8 |
| Apple Mac OS X Server 10.8 |
