2 lines
3.4 KiB
JSON
2 lines
3.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BIND 9","vendor":"ISC","versions":[{"lessThanOrEqual":"9.20.20","status":"affected","version":"9.20.0","versionType":"custom"},{"lessThanOrEqual":"9.21.19","status":"affected","version":"9.21.0","versionType":"custom"},{"lessThanOrEqual":"9.20.20-S1","status":"affected","version":"9.20.9-S1","versionType":"custom"},{"lessThanOrEqual":"9.18.46","status":"unaffected","version":"9.18.0","versionType":"custom"},{"lessThanOrEqual":"9.18.46-S1","status":"unaffected","version":"9.18.11-S1","versionType":"custom"}]}],"source":"security-officer@isc.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*","matchCriteriaId":"2C0EF5D0-68A6-4E00-985B-523D9B243E49","versionEndExcluding":"9.20.21","versionStartIncluding":"9.20.0","vulnerable":true},{"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*","matchCriteriaId":"B1DD0950-5CBD-49B2-8007-5E96B3C4FB1B","versionEndExcluding":"9.21.20","versionStartIncluding":"9.21.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Under certain conditions, `named` may crash when processing a correctly signed query containing a TKEY record. The affected code can only be reached if an incoming request has a valid transaction signature (TSIG) from a key declared in the `named` configuration.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1.\nBIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through 9.18.46-S1 are NOT affected."},{"lang":"es","value":"Bajo ciertas condiciones, 'named' puede colapsar al procesar una consulta correctamente firmada que contiene un registro TKEY. El código afectado solo se puede acceder si una solicitud entrante tiene una firma de transacción (TSIG) válida de una clave declarada en la configuración de 'named'.\nEste problema afecta a las versiones de BIND 9 9.20.0 a 9.20.20, 9.21.0 a 9.21.19, y 9.20.9-S1 a 9.20.20-S1.\nLas versiones de BIND 9 9.18.0 a 9.18.46 y 9.18.11-S1 a 9.18.46-S1 NO están afectadas."}],"id":"CVE-2026-3119","lastModified":"2026-06-17T10:43:04.663","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"security-officer@isc.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3119","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-25T14:13:41.579382Z","version":"2.0.3"}}]},"published":"2026-03-25T14:16:37.097","references":[{"source":"security-officer@isc.org","tags":["Patch"],"url":"https://downloads.isc.org/isc/bind9/9.20.21"},{"source":"security-officer@isc.org","tags":["Patch"],"url":"https://downloads.isc.org/isc/bind9/9.21.20"},{"source":"security-officer@isc.org","tags":["Vendor Advisory"],"url":"https://kb.isc.org/docs/cve-2026-3119"}],"sourceIdentifier":"security-officer@isc.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-617"}],"source":"security-officer@isc.org","type":"Secondary"}]}
|