CVE-2016-2776 – 绿盟科技技术博客

ISC BIND 9 Denial-of-Service Technical Analysis and Solution

2016-10-19绿盟科技CVE-2016-2776, EnglishVersion, ISC BIND 9 Denial-of-Service, Recommended Solutions, Technical Analysis and Solution

Internet Systems Consortium (ISC) officially released a security advisory to announce a vulnerability (CVE-2016-2776) and its fixing. The vulnerability exists in buffer.c. When constructing a response packet for a specially crafted query request, BIND will encounter an assertion failure, causing the program to crash and therefore a denial of service.

ISC BIND 9 DoS漏洞技术分析与防护方案

2016-10-14苏少博BIND 9 version, CVE-2016-2776, DoS攻击, ISC BIND 9拒绝服务漏洞, ISC BIND 漏洞, 绿盟科技, 绿盟科技威胁事件定级标准

高危漏洞通告 BIND最新漏洞将导致DoS攻击，绿盟科技发布预警通告之后，绿盟科技发布技术分析与防护方案。

【预警通稿】ISC BIND 9拒绝服务漏洞威胁

2016-10-14绿盟科技BIND 9 version, CVE-2016-2776, ISC BIND 9拒绝服务漏洞, ISC BIND 漏洞, 绿盟科技, 绿盟科技威胁事件定级标准

ISC互联网系统协会（Internet Systems Consortium）官网发布了一个安全通告，公布了编号为CVE-2016-2776的漏洞及其修复情况。该漏洞位于文件buffer.c中，当程序在为精心构造的查询请求构建响应时会遇到断言失败，导致程序崩溃，从而造成拒绝服务。