Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC BIND 9远程拒绝服务攻击漏洞
Vulnerability Description
BIND是一款由ISC维护的Internet域名名字系统实现。 BIND 9在处理特殊DNS包时存在漏洞,可导致远程攻击者关闭BIND服务程序。 攻击者可以发送设计用于触发一内部一致性检查的DNS包而导致BIND服务程序崩溃,由于此崩溃是由于程序探测到错误条件而不是处理错误而触发,所以不允许攻击者执行任意命令或者写数据到任意内存位置。 当传递给message.c中的dns_message_findtype()函数的rdataset参数不是所预期的NULL时,内部一致性检查就会触发。此条件导致代码声称接收到
CVSS Information
N/A
Vulnerability Type
N/A