ISC.BIND.DNS64.RPZ.Combination.DoS

Description

This indicates an attack attempt to exploit a Denial of Service vulnerability in ISC BIND.
The vulnerability is due to a defect that can cause the named service to exit with an assertion failure or crash due to a NULL pointer dereference while processing a query and running a specific configuration. It allows a remote attacker to cause a denial of service condition the vulnerable server.

Affected Products

ISC BIND 9.8.8
ISC BIND 9.9.3-S1 to 9.9.9-S7
ISC BIND 9.9.10b1
ISC BIND 9.10.0 to 9.10.4-P5
ISC BIND 9.10.5b1
ISC BIND 9.11.0 to 9.11.0-P2
ISC BIND 9.11.1b1

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor:
https://kb.isc.org/article/AA-01453

References