SkipNavigation
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric



 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

 

Vulnerability Note VU#198355

ISC BIND 8.2.2-P6 vulnerable to DoS when processing SRV records, aka the "srv bug"

Overview

There is a denial-of-service vulnerability in several versions of the Internet Software Consortium's (ISC) BIND software. This vulnerability is referred to by the ISC as the "srv bug" and affects ISC BIND versions 8.2 through 8.2.2-P6.

I. Description

This vulnerability can cause affected DNS servers running named to go into an infinite loop, thus preventing further name requests to be handled. This can happen if an SRV record (defined in RFC2782) is sent to the vulnerable server.

Microsoft's Windows 2000 Active Directory service makes extensive use of SRV records and is reportedly capable of triggering this bug in the course of normal operations. This is not, however, a vulnerability in Microsoft Active Directory. Any network client capable of sending SRV records to vulnerable name server systems can exercise this vulnerability.

II. Impact

A remote attacker can use malicious SRV records to crash vulnerable BIND servers, resulting in a denial-of-service condition that disables name resolution service.

III. Solution

Apply a patch from your vendor


To address this vulnerability, the CERT/CC recommends that all users of ISC BIND upgrade to version 8.2.2-P7, which patches both VU#198355 and VU#715973. For information regarding vendor-specific versions of DNS software, please consult the Systems Affected section of this document.

Systems Affected

VendorStatusDate Updated
CalderaUnknown16-May-2001
Compaq Computer CorporationVulnerable16-May-2001
ConectivaUnknown11-May-2001
DebianVulnerable16-May-2001
FreeBSDNot Vulnerable11-May-2001
FujitsuNot Vulnerable11-May-2001
Hewlett PackardVulnerable25-Jan-2002
IBMVulnerable11-May-2001
ImmunixUnknown11-May-2001
ISCVulnerable11-May-2001
MandrakeSoftUnknown11-May-2001
MicrosoftUnknown11-May-2001
NetBSDUnknown11-May-2001
RedHatUnknown11-May-2001
SlackwareUnknown11-May-2001
SuSEVulnerable11-May-2001
TrustixVulnerable11-May-2001

References


http://www.isc.org/products/BIND/bind8.html
http://www.isc.org/products/BIND/bind-security.html

Credit

The CERT Coordination Center thanks Mark Andrews, David Conrad, and Paul Vixie of the ISC for developing a solution and assisting in the preparation of this document.

This document was written by Jeffrey S. Havrilla and Jeffrey P. Lanza.

Other Information

Date Public11/07/2000
Date First Published05/11/2001 09:44:25 AM
Date Last Updated01/25/2002
CERT AdvisoryCA-2000-20
CVE NameCVE-2000-0888
US-CERT Technical Alerts 
Metric16.71
Document Revision10

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Copyright 2001 Carnegie Mellon University
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader