2 lines
4.0 KiB
JSON
2 lines
4.0 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BIND 9","vendor":"ISC","versions":[{"lessThanOrEqual":"9.16.50","status":"affected","version":"9.11.0","versionType":"custom"},{"lessThanOrEqual":"9.18.48","status":"affected","version":"9.18.0","versionType":"custom"},{"lessThanOrEqual":"9.20.22","status":"affected","version":"9.20.0","versionType":"custom"},{"lessThanOrEqual":"9.21.21","status":"affected","version":"9.21.0","versionType":"custom"},{"lessThanOrEqual":"9.16.50-S1","status":"affected","version":"9.11.3-S1","versionType":"custom"},{"lessThanOrEqual":"9.18.48-S1","status":"affected","version":"9.18.11-S1","versionType":"custom"},{"lessThanOrEqual":"9.20.22-S1","status":"affected","version":"9.20.9-S1","versionType":"custom"}]}],"source":"security-officer@isc.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*","matchCriteriaId":"9EC5B9B1-25F2-48CA-9E8A-59D8E81D408A","versionEndIncluding":"9.16.50","versionStartIncluding":"9.11.0","vulnerable":true},{"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*","matchCriteriaId":"49533F8C-D7B5-450A-8808-7E1C76F4FAE4","versionEndExcluding":"9.18.49","versionStartIncluding":"9.18.0","vulnerable":true},{"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*","matchCriteriaId":"D92461F1-BA01-479E-B740-38855CC216E6","versionEndExcluding":"9.20.23","versionStartIncluding":"9.20.0","vulnerable":true},{"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*","matchCriteriaId":"B254E8E7-3F57-4552-ACBF-623FA481B697","versionEndExcluding":"9.21.22","versionStartIncluding":"9.21.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources.\nThis issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1."},{"lang":"es","value":"Los resolutores BIND son vulnerables a un ataque de consumo/agotamiento de recursos amplificado. Si un resolutor víctima realiza una consulta a una zona especialmente diseñada, el resolutor consumirá recursos desproporcionados.\nEste problema afecta a las versiones de BIND 9 9.11.0 hasta 9.16.50, 9.18.0 hasta 9.18.48, 9.20.0 hasta 9.20.22, 9.21.0 hasta 9.21.21, 9.11.3-S1 hasta 9.16.50-S1, 9.18.11-S1 hasta 9.18.48-S1, y 9.20.9-S1 hasta 9.20.22-S1."}],"id":"CVE-2026-3592","lastModified":"2026-07-24T10:10:00.197","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security-officer@isc.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3592","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-20T13:42:13.661954Z","version":"2.0.3"}}]},"published":"2026-05-20T13:16:23.790","references":[{"source":"security-officer@isc.org","tags":["Patch"],"url":"https://downloads.isc.org/isc/bind9/9.18.49"},{"source":"security-officer@isc.org","tags":["Patch"],"url":"https://downloads.isc.org/isc/bind9/9.20.23"},{"source":"security-officer@isc.org","tags":["Patch"],"url":"https://downloads.isc.org/isc/bind9/9.21.22"},{"source":"security-officer@isc.org","tags":["Vendor Advisory"],"url":"https://kb.isc.org/docs/cve-2026-3592"}],"sourceIdentifier":"security-officer@isc.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-408"}],"source":"security-officer@isc.org","type":"Secondary"}]}
|