Cache poisoning attacks with unsolicited RRs
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.
This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
Problem Types
| Type | CWE ID | Description |
|---|
| CWE | CWE-349 | CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data |
Type: CWE
Description: CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data
Metrics
| Version | Base score | Base severity | Vector |
|---|
| 3.1 | 8.6 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N |
Version: 3.1
Base score: 8.6
Base severity: HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Impacts
| CAPEC ID | Description |
|---|
| N/A | Forged records can be injected into cache during a query, which can potentially affect resolution of future queries. |
CAPEC ID: N/A
Description: Forged records can be injected into cache during a query, which can potentially affect resolution of future queries.