Recommended action window: Monitor and triage in normal cycle
NVD description
resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a record in a malformed zone.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
( ꒪⌓꒪)…忘れたくても思い出せない(遠い目) (つぶらな瞳で)BIND9.9.3にしてからこんなエラー吐いて落ちるんやが… https://lists.isc.org/mailman/htdig/bind-users/2013-June/090740.html ↓ (中の人)脆弱性発見おめでとう! https://lists.isc.org/mailman/htdig/bind-users/2013-June/090744.html ↓ CVE-2013-3919 https://kb.isc.org/docs/aa-00967 いわゆる Type II (in the wild) - ISC Software Defect and Vulnerability Disclosure Policy(https://kb.isc.org/docs/aa-00861)
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | isc | bind | 9.6 | - | - |
| App | isc | bind | 9.8.5 | - | - |
| App | isc | bind | 9.9.3 | - | - |