Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC BIND UPDATE请求处理拒绝服务漏洞
Vulnerability Description
ISC BIND是美国Internet Systems Consortium(ISC)公司所维护的一套实现了DNS协议的开源软件。 ISC BIND中存在拒绝服务漏洞。此漏洞源于处理UPDATE请求时的错误,通过发送特制的UPDATE请求造成named进程中断。因为漏洞代码所在位置,不可能通过named.conf中配置的ACL或禁用一些功能(在编译时或运行时)来保护BIND。远程攻击者可利用此漏洞影响递归和授权服务器,造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A