Unknown
An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
Unknown
(0 users assessed)
Unknown
(0 users assessed)Unknown
Unknown
Unknown
An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 –> 9.8.8-P1, 9.9.0 –> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 –> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 –> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 –> 9.9.9-S8.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Products
- bind,
- bind 9.10.4,
- bind 9.10.5,
- bind 9.11.0,
- bind 9.11.1,
- bind 9.8.0,
- bind 9.9.0,
- bind 9.9.10,
- bind 9.9.3,
- data ontap edge -,
- debian linux 8.0,
- element software -,
- enterprise linux desktop 6.0,
- enterprise linux desktop 7.0,
- enterprise linux server 6.0,
- enterprise linux server 7.0,
- enterprise linux server aus 7.3,
- enterprise linux server aus 7.4,
- enterprise linux server aus 7.6,
- enterprise linux server eus 7.3,
- enterprise linux server eus 7.4,
- enterprise linux server eus 7.5,
- enterprise linux server eus 7.6,
- enterprise linux server tus 7.3,
- enterprise linux server tus 7.6,
- enterprise linux workstation 6.0,
- enterprise linux workstation 7.0,
- oncommand balance -
References
Advisory
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
