CVE-2008-4163 — Improper Input Validation in Bind

CWE-20 — Improper Input Validation5 documents5 sources
Severity
7.8HIGHNVD
EPSS
26.7%
top 3.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
ISC Bind
Timeline
PublishedSep 22
Latest updateMay 2

Description

Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service (UDP client handler termination) via unknown vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

▶NVDisc/bind9.3.5, 9.4.2, 9.5.0+2

🔴Vulnerability Details

2
GHSA
GHSA-g2xj-f72j-cf22: Unspecified vulnerability in ISC BIND 9↗2022-05-02
▶
CVEList
CVE-2008-4163: Unspecified vulnerability in ISC BIND 9↗2008-09-22
▶

📋Vendor Advisories

2
Debian
CVE-2008-4163: bind9 - Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 ...↗2008
▶
Red Hat
CVE-2008-4163: Unspecified vulnerability in ISC BIND 9↗
▶
CVE-2008-4163 — Improper Input Validation in ISC Bind | cvebase