CVE-2016-2775

MEDIUM · 5.9 CVSS Gepubliceerd: 20-07-2016 CWE-20

Beschrijving

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

Vendors

Hp Isc Fedoraproject Redhat

Affected products

Hp-ux Bind Fedora Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Tus Enterprise Linux Workstation

References

www.securityfocus.com
www.securitytracker.com
access.redhat.com
access.redhat.com
access.redhat.com
h20566.www2.hpe.com
kb.isc.org
kb.isc.org
kb.isc.org
kb.isc.org
lists.fedoraproject.org
lists.fedoraproject.org
lists.fedoraproject.org
lists.fedoraproject.org
security.gentoo.org
security.netapp.com