ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
{
"unresolved_ranges": [
{
"cpe": "cpe:2.3:a:isc:bind:9.10.4:beta1:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.10.4-beta1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.4:beta2:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.10.4-beta2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.4:beta3:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.10.4-beta3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.11.0:alpha1:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.11.0-alpha1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.11.0:alpha2:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.11.0-alpha2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.11.0:alpha3:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.11.0-alpha3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.11.0:beta1:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.11.0-beta1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.9:s1rc1:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.9.9-s1rc1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "23"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "24"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "b.11.31"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.4"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.6"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.7"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.6"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.7"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.6"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.7"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.0"
}
],
"source": "CPE_FIELD"
}
]
}{
"cpe": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
},
{
"last_affected": "7.5"
}
],
"source": "CPE_FIELD"
}{
"cpe": [
"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.9.9:-:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.9.9:b1:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.9.9:b2:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.9.9:p1:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.9.9:rc1:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.9.9:s1:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.10.4:-:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.10.4:p1:*:*:*:*:*:*",
"cpe:2.3:a:isc:bind:9.11.0:-:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "9.0"
},
{
"last_affected": "9.9.8"
},
{
"introduced": "9.10.0"
},
{
"last_affected": "9.10.3"
},
{
"introduced": "0"
},
{
"last_affected": "9.9.9-NA"
},
{
"last_affected": "9.9.9-b1"
},
{
"last_affected": "9.9.9-b2"
},
{
"last_affected": "9.9.9-p1"
},
{
"last_affected": "9.9.9-rc1"
},
{
"last_affected": "9.9.9-s1"
},
{
"last_affected": "9.10.4-NA"
},
{
"last_affected": "9.10.4-p1"
},
{
"last_affected": "9.11.0-NA"
}
],
"source": "CPE_FIELD"
}