Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

ISC BIND < 4.9.5 Multiple DNS Resolver Functions Remote Overflow (deprecated)

Critical

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote BIND server, according to its version number, is vulnerable to a remote buffer overflow within its resolver code. An attacker may be able to execute arbitrary code by having the remote DNS server make a request and send back a malicious DNS response with an invalid length field.

Solution

Upgrade to BIND 4.9.5 or newer.