CVE-2005-0034
CVE-2005-0034
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail.
EPSS 6.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.trustix.org/errata/2005/0003/
- http://www.securityfocus.com/bid/12365
- http://www.isc.org/index.pl?/sw/bind/bind9.php
- http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html
- http://secunia.com/advisories/14008
- http://www.isc.org/index.pl?/sw/bind/bind-security.php
- http://www.kb.cert.org/vuls/id/938617
- http://securitytracker.com/id?1012995
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19062
- https://nvd.nist.gov/vuln/detail/CVE-2005-0034