ISC BIND 9.7.1-9.7.2-P3 IXFR / DDNS Update Combined with High Query Rate DoS
high Nessus Plugin ID 52158
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote name server is affected by a denial of service vulnerability.Description
According to its self-reported version number, the remote installation of BIND is affected by a denial of service vulnerability.There is a small window of time after an authoritative server processes a successful IXFR transfer or a dynamic update during which the IXFR / update coupled with a query may cause a deadlock to occur.
A server experiencing a high query and/or update rate will have a higher chance of being deadlocked.
Solution
Upgrade to BIND 9.7.3 or later.A possible workaround is to restrict BIND to a single worker thread, using the '-n1' flag for example.
See Also
Plugin Details
Severity: High
ID: 52158
File Name: bind9_973.nasl
Version: 1.10
Type: remote
Family: DNS
Published: 2/23/2011
Updated: 6/27/2018
Dependencies: bind_version.nasl
Configuration: Enable paranoid mode
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.1
Temporal Score: 5.3
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Temporal Vector: E:U/RL:OF/RC:C
Vulnerability Information
CPE: cpe:/a:isc:bind
Required KB Items: bind/version, Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 2/15/2011
Vulnerability Publication Date: 2/22/2011
Reference Information
CVE: CVE-2011-0414
BID: 46491