Deskripsi CVE

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-399	Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	7.8		AV:N/AC:L/Au:N/C:N/I:N/A:C	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Isc>>Bind >> Version 9.0

Isc>>Bind >> Version 9.0.1

Isc>>Bind >> Version 9.1

Isc>>Bind >> Version 9.1.1

Isc>>Bind >> Version 9.1.2

Isc>>Bind >> Version 9.1.3

Isc>>Bind >> Version 9.2

Isc>>Bind >> Version 9.2.0

Isc>>Bind >> Version 9.2.1

Isc>>Bind >> Version 9.2.2

Isc>>Bind >> Version 9.2.3

Isc>>Bind >> Version 9.2.4

Isc>>Bind >> Version 9.2.5

Isc>>Bind >> Version 9.2.6

Isc>>Bind >> Version 9.2.7

Isc>>Bind >> Version 9.2.8

Isc>>Bind >> Version 9.2.9

Isc>>Bind >> Version 9.3

Isc>>Bind >> Version 9.3.0

Isc>>Bind >> Version 9.3.1

Isc>>Bind >> Version 9.3.2

Isc>>Bind >> Version 9.3.3

Isc>>Bind >> Version 9.3.4

Isc>>Bind >> Version 9.3.5

Isc>>Bind >> Version 9.3.6

Isc>>Bind >> Version 9.4

Isc>>Bind >> Version 9.4.0

Isc>>Bind >> Version 9.4.1

Isc>>Bind >> Version 9.4.2

Isc>>Bind >> Version 9.4.3

Isc>>Bind >> Version 9.5

Isc>>Bind >> Version 9.5.0

Isc>>Bind >> Version 9.5.1

Isc>>Bind >> Version 9.5.2

Isc>>Bind >> Version 9.5.3

Isc>>Bind >> Version 9.6.0

Isc>>Bind >> Version 9.6.1

Isc>>Bind >> Version 9.6.2

Isc>>Bind >> Version 9.6.3

Isc>>Bind >> Version 9.7.0

Isc>>Bind >> Version 9.7.1

Isc>>Bind >> Version 9.7.2

Isc>>Bind >> Version 9.7.3

Isc>>Bind >> Version 9.7.4

Isc>>Bind >> Version 9.7.5

Isc>>Bind >> Version 9.7.6

Isc>>Bind >> Version 9.7.7

Isc>>Bind >> Version 9.8.0

Isc>>Bind >> Version 9.8.1

Isc>>Bind >> Version 9.8.2

Isc>>Bind >> Version 9.8.3

Isc>>Bind >> Version 9.8.4

Isc>>Bind >> Version 9.8.5

Isc>>Bind >> Version 9.8.6

Isc>>Bind >> Version 9.9.0

Isc>>Bind >> Version 9.9.1

Isc>>Bind >> Version 9.9.2

Isc>>Bind >> Version 9.9.3

Isc>>Bind >> Version 9.9.4

Isc>>Bind >> Version 9.9.5

Isc>>Bind >> Version 9.9.6

Isc>>Bind >> Version 9.10.0

Isc>>Bind >> Version 9.10.1

Referensi

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=142180687100892&w=2
Tags : vendor-advisory, x_refsource_HP

http://security.gentoo.org/glsa/glsa-201502-03.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/62122
Tags : third-party-advisory, x_refsource_SECUNIA

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-002.txt.asc
Tags : vendor-advisory, x_refsource_NETBSD

https://kb.isc.org/article/AA-01216/
Tags : x_refsource_CONFIRM

http://www.mandriva.com/security/advisories?name=MDVSA-2015:165
Tags : vendor-advisory, x_refsource_MANDRIVA

http://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/62064
Tags : third-party-advisory, x_refsource_SECUNIA

http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html
Tags : x_refsource_MISC

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10676
Tags : x_refsource_CONFIRM

http://www.debian.org/security/2014/dsa-3094
Tags : vendor-advisory, x_refsource_DEBIAN

http://securitytracker.com/id?1031311
Tags : vdb-entry, x_refsource_SECTRACK

http://advisories.mageia.org/MGASA-2014-0524.html
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00013.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.kb.cert.org/vuls/id/264212
Tags : third-party-advisory, x_refsource_CERT-VN

http://www.securityfocus.com/bid/71590
Tags : vdb-entry, x_refsource_BID

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00017.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://ubuntu.com/usn/usn-2437-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://marc.info/?l=bugtraq&m=144000632319155&w=2
Tags : vendor-advisory, x_refsource_HP

http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html
Tags : vendor-advisory, x_refsource_APPLE

http://rhn.redhat.com/errata/RHSA-2016-0078.html
Tags : vendor-advisory, x_refsource_REDHAT

https://support.apple.com/HT205219
Tags : x_refsource_CONFIRM