Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
https://kb.isc.org/article/AA-00729
http://www.vuxml.org/freebsd/0bc67930-d5c3-11e1-bef6-0024e81297ae.html
Insight
The following packages are affected:
bind99
bind98
bind97
bind96
CVE-2012-3817
ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2 9.8.x before
9.8.3-P2
9.9.x before 9.9.1-P2
and 9.6-ESV before 9.6-ESV-R7-P2,
when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.
Severity
Classification
-
CVE CVE-2012-3817 -
CVSS Base Score: 7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
Related Vulnerabilities