Oval Definition:oval:com.ubuntu.precise:def:20140591000
Revision Date:2014-01-13Version:1
Title:CVE-2014-0591 on Ubuntu 12.04 LTS (precise) - medium.
Description:The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-0591
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'bind9' package in precise was vulnerable but has been fixed (note: '1:9.8.1.dfsg.P1-4ubuntu0.8').
    • BACK