VulnerabilityModified
CVE-2005-0033
Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses.
MEDIUM 5.0EPSS 11.4%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.4%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 11.45% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- isc/bind
- Source
- cve@mitre.org
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt
- http://secunia.com/advisories/14009
- http://secunia.com/advisories/18291
- http://securitytracker.com/id?1012996
- http://www.isc.org/index.pl?/sw/bind/bind-security.phpPatch
- http://www.isc.org/index.pl?/sw/bind/bind8.phpPatch
- http://www.kb.cert.org/vuls/id/327633Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/12364
- http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.htmlPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19063
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt
- http://secunia.com/advisories/14009
- http://secunia.com/advisories/18291
- http://securitytracker.com/id?1012996
- http://www.isc.org/index.pl?/sw/bind/bind-security.phpPatch
- http://www.isc.org/index.pl?/sw/bind/bind8.phpPatch
- http://www.kb.cert.org/vuls/id/327633Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/12364
- http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.htmlPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19063
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.