CVE-2008-0122

严重 10.0CVE-2008-0122 · Published 16/01/2008 · updated 16/06/2026

要点

CVE-2008-0122 是影响 bind (isc) 的严重 (CVSS 10.0)漏洞。
未来 30 天内被利用的概率（EPSS）：12.4%，高于 96.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
bind isc	`≤ 9.4.2`	No fix yet

Description

Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.

References

lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html · Mailing List
secunia.com/advisories/28367 · Third Party Advisory
secunia.com/advisories/28429 · Third Party Advisory
secunia.com/advisories/28487 · Third Party Advisory
secunia.com/advisories/28579 · Third Party Advisory
secunia.com/advisories/29161 · Third Party Advisory
secunia.com/advisories/29323 · Third Party Advisory
secunia.com/advisories/30313 · Third Party Advisory
secunia.com/advisories/30538 · Third Party Advisory
secunia.com/advisories/30718 · Third Party Advisory
security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc · Patch
sunsolve.sun.com/search/document.do · Broken Link
support.avaya.com/elmodocs2/security/ASA-2008-244.htm

bind 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bind

isc

≤ 9.4.2

No fix yet

Description

bind 的其他漏洞

查看全部 →