Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC BIND SIG资源记录无效过期时间拒绝服务攻击漏洞
Vulnerability Description
BIND是一个应用非常广泛的DNS协议的实现,由ISC(Internet Software Consortium)负责维护,具体的开发由Nominum(www.nominum.com)公司来完成。 允许递归查询的BIND 8服务器可能会由于使用一个无效空指针而造成服务中断。一个控制了一个权威域名服务器的攻击者可以导致受影响的BIND 8服务器试图缓存带有无效过期时间的SIG资源记录的信息。这些记录会被从BIND内部数据库中删除,但BIND仍然会错误地引用这些记录,从而造成拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A