Description
ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
References
- http://www.isc.org/index.pl?/sw/bind/bind-security.php
- CLA-2002:494 vendor-advisory
- RHSA-2002:119 vendor-advisory
- MDKSA-2002:038 vendor-advisory
- 4936 vdb-entry
- RHSA-2002:105 vendor-advisory
- CA-2002-15 third-party-advisory
- RHSA-2003:154 vendor-advisory
- VU#739123 third-party-advisory
- HPSBUX0207-202 vendor-advisory
- bind-findtype-dos(9250) vdb-entry
- SuSE-SA:2002:021 vendor-advisory