Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC BIND 9 DNSSEC查询响应远程缓存中毒漏洞
Vulnerability Description
具有DNSSEC验证启用和检查禁用的ISC BIND 9.0.x至9.3.x版本，9.4.3-P4之前的9.4版本，9.5.2-P1之前的9.5版本，9.6.1-P2之前的9.6版本，9.7.0b3之前的9.7 beta版本中存在未明漏洞。当解决回归性客户询问所发出的回复中“同时要求DNSSEC纪录(DO)"时，回复不能完全处理，远程攻击者可以借助该回复的附加部分导致DNS高速缓冲存储器中毒攻击。
CVSS Information
N/A
Vulnerability Type
N/A