CVE-1999-0835

Denial of service in BIND named via malformed SIG records

published January 4, 2000

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

⚠️ A rogue SIG record is all it takes to send servers crashing in BIND named! This vulnerability is a classic denial-of-service scenario that can leave your DNS service gasping for air. 😱 Think of it like a restaurant where a customer orders an impossible dish — the kitchen gets overwhelmed trying to make sense of it, causing a bottleneck that halts all service. In this case, the malformed SIG records jumble up the DNS server's operations, leaving it unable to respond to legitimate requests. If exploited, this could result in a complete denial of service, causing the DNS server to be unresponsive. This means users would face disruptions when trying to access websites, leading to a frustrating browsing experience — and we all know how impatient users can be!

Put simply

Think of it like a restaurant where a customer orders an impossible dish — the kitchen gets overwhelmed trying to make sense of it, causing a bottleneck that halts all service. In this case, the malformed SIG records jumble up the DNS server's operations, leaving it unable to respond to legitimate requests. This vulnerability in BIND named occurs when the server receives malformed SIG records, causing it to enter a state where it cannot process queries, effectively shutting down its services.

What to do

If exploited, this could result in a complete denial of service, causing the DNS server to be unresponsive. This means users would face disruptions when trying to access websites, leading to a frustrating browsing experience — and we all know how impatient users can be! To protect against this, ensure your BIND installations are updated to the latest version where this issue is resolved. Regularly review your DNS configurations and monitor for any unusual behavior to stay ahead of potential issues. 🛡️ You’ve got this! With a few proactive steps, you can keep your DNS service running smoothly and your users happy. 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01456 · 73.3th percentile
Published
2000-01-04T05:00Z
EPSS history
Timeline
  • 04 JAN 05:00Z
    Denial of service in BIND named via malformed SIG records
    cvelistv5