| Package | Affected versions | Patched versions |
|---|---|---|
| bind | = 9.7.0= 9.7.1= 9.7.2= 9.7.3= 9.7.4= 9.7.5= 9.7.6= 9.8.0= 9.8.1= 9.8.2= 9.8.3= 9.8.4= 9.8.5= 9.9.0= 9.9.1= 9.9.2= 9.9.3 |
libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free