CVE-1999-0849

CVSS 2.0 Score 5 of 10 (medium)

Details

Published Nov 10, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0849 is a denial-of-service vulnerability affecting BIND named (Name Server Daemon). The issue arises due to a lack of validation for maximum size of a DNS label, allowing an attacker to send specially crafted packets causing the server to consume excessive memory and crash. The result is a denial-of-service condition, making it essential for administrators to update their BIND DNS servers to a non-vulnerable version as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • ISC BIND

Affected Vendors

  • Internet Storm Center