Denial of Service Vulnerability in NSD by NLnet Labs
CVE-2016-6173

7.5HIGH

Key Information:

Vendor

Nlnetlabs

Status
Nsd
Vendor
CVE Published:
9 February 2017

What is CVE-2016-6173?

A vulnerability in NSD versions prior to 4.1.11 allows remote DNS master servers to exploit a zone transfer mechanism. This exploit can lead to excessive disk consumption in the /tmp directory and result in crashes of the slave servers. Attackers can abuse this flaw by sending unlimited data, causing operational disruptions that could affect service availability.

References

https://open.nlnetlabs.nl/pipermail/nsd-users/2016-August...
mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2016/07/06/3
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/91678
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.