| Vulnerability Name: | CVE-1999-0835 (CCN-3525) | ||||||||
| Assigned: | 1999-11-08 | ||||||||
| Published: | 1999-11-08 | ||||||||
| Updated: | 2018-10-30 | ||||||||
| Summary: | Denial of service in BIND named via malformed SIG records. | ||||||||
| CVSS v3 Severity: | 7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C) 7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: CALDERA Type: UNKNOWN CSSA-1999-034.1 Source: CCN Type: Caldera International, Inc. Security Advisory CSSA-1999-034.1 several vulnerabilities in bind Source: MITRE Type: CNA CVE-1999-0835 Source: CCN Type: RHSA-1999:054-01 Security problems in bind Source: CCN Type: TurboLinux Security Updates bind-8.2.2P5-1.i386.rpm Source: CCN Type: Hewlett-Packard Company Security Bulletin HPSBUX0005-114 Security vulnerability in the BIND executable Source: CCN Type: CERT Advisory CA-1999-14 Multiple Vulnerabilities in BIND Source: CCN Type: CIAC Information Bulletin K-007 Multiple Vulnerabilities in BIND Source: CCN Type: Internet Software Consortium (ISC) Web site BIND Vulnerabilities Source: CCN Type: US-CERT VU#13145 BIND memcpy not bounded in case T_SIG of rrextract() Source: CCN Type: OSVDB ID: 34751 ISC BIND Malformed SIG Record Remote DoS Source: BID Type: UNKNOWN 788 Source: CCN Type: BID-788 Multiple Vendor BIND (NXT Overflow & Denial of Service) Vulnerabilities Source: CCN Type: SuSE Security Announcement #28 bind8 < 8.2.2p2 + bind4 < 4.9.7-REL Source: XF Type: UNKNOWN bind-sigrecord-dos(3525) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||