Security News > 2018 > January > Vulnerability in ISC BIND leads to DoS, patch today!

Vulnerability in ISC BIND leads to DoS, patch today!
2018-01-17 16:00

The Internet Systems Consortium has released security updates for BIND, the most widely used Domain Name System (DNS) software on the Internet, and a patch for ISC DHCP, its open source software that implements the Dynamic Host Configuration Protocol for connection to an IP network. BIND update The BIND update should be implemented as soon as possible: the vulnerability (CVE-2017-3145) can lead to denial-of-service and crash, and instances of that happening have been reported by … More →


News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/3jWsUXaVl8Q/

Related Vulnerability

DATE CVE VULNERABILITY TITLE RISK
2019-01-16 CVE-2017-3145 Use After Free vulnerability in multiple products
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named.
network
low complexity
isc redhat debian netapp juniper CWE-416
7.5

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
ISC 7 11 91 67 3 172