ISC BIND 9 for Windows UDP Client Handler Remote DoS

medium Nessus Plugin ID 34245

Language:

Synopsis

The remote name server is affected by a denial of service vulnerability.

Description

According to its version number, the remote installation of BIND suffers from a vulnerability in which the UDP client handler can be shutdown, which in turn causes the server to stop responding to UDP queries.

Note that this issue only exists in the Windows code of BIND 9.5.0-P2-W1 / 9.4.2-P2-W1 / 9.3.5-P2-W1.

Solution

Upgrade to BIND 9.5.0-P2-W2 / 9.4.2-P2-W2 / 9.3.5-P2-W2 or later.

Plugin Details

Severity: Medium

ID: 34245

File Name: bind_9_5_0_p2_w2.nasl

Version: 1.15

Type: remote

Family: DNS

Published: 9/20/2008

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:isc:bind

Required KB Items: bind/version

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2008-4163

BID: 31252

CWE: 20

Detections

Analytics