Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC BIND OPT资源记录远程拒绝服务攻击漏洞
Vulnerability Description
BIND是一个应用非常广泛的DNS协议的实现,由ISC(Internet Software Consortium)负责维护,具体的开发由Nominum(www.nominum.com)公司来完成。 允许递归查询的BIND 8服务器可能会由于一个assertion失效导致意外中止。当客户端请求一个有效域名下的无效子域名时,如果该DNS请求带有超大UDP载荷长度的OPT资源记录,BIND 8在构造NXDOMAIN回复时会触发一个assertion,从而中止服务。攻击者也可以通过查询哪些权威DNS服务器不可到达
CVSS Information
N/A
Vulnerability Type
N/A