[Forgot Password]
Login  Register Subscribe

25354

 
 

132804

 
 

134729

 
 

909

 
 

109403

 
 

153

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2016-2775Date: (C)2016-08-25   (M)2019-08-20


ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 5.9CVSS Score : 4.3
Exploit Score: 2.2Exploit Score: 8.6
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: HIGHAccess Complexity: MEDIUM
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: NONEAvailability: PARTIAL
Integrity: NONE 
Availability: HIGH 
  
Reference:
SECTRACK-1036360
BID-92037
FEDORA-2016-007efacd1c
FEDORA-2016-2941b3264e
FEDORA-2016-3fba74e7f5
FEDORA-2016-53f0c65f40
GLSA-201610-07
RHBA-2017:0651
RHBA-2017:1767
RHSA-2017:2533
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107
https://kb.isc.org/article/AA-01393/74/CVE-2016-2775
https://kb.isc.org/article/AA-01435
https://kb.isc.org/article/AA-01436
https://kb.isc.org/article/AA-01438
https://security.netapp.com/advisory/ntap-20160722-0002/

CPE    344
cpe:/o:hp:hp-ux:b.11.31
cpe:/a:isc:bind:9.2.4:rc2
cpe:/a:isc:bind:9.2.4:rc3
cpe:/a:isc:bind:9.3.1:rc1
...
CWE    1
CWE-20
OVAL    10
oval:org.secpod.oval:def:111198
oval:org.secpod.oval:def:111186
oval:org.secpod.oval:def:111136
oval:org.secpod.oval:def:1800578
...

© SecPod Technologies