Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

Debian 8: DSA-3795-1 Moderate: Bind9 Crash Risk from Crafted DNS Queries

debian
Calendar Grey February 26, 2017
Debian Logo
Explore the Debian advisory DSA-3796-1 which informs about a potential vulnerability in apache2 caused by specially designed HTTP requests.
It was discovered that a maliciously crafted query can cause ISC's BIND DNS server (named) to crash if both Response Policy Zones (RPZ) and DNS64 (a bridge between IPv4 and IPv6 ne...
Topics%20covered

Topics Covered

security advisory bind9 dns exploit crash risk debian jessie

Summary

This update also corrects an additional regression caused by the fix
for CVE-2016-8864, which was applied in a previous security update.

For the stable distribution (jessie), this problem has been fixed in
version 1:9.9.5.dfsg-9+deb8u10.

For the testing (stretch) and unstable (sid) distributions, this
problem has been fixed in version 1:9.10.3.dfsg.P4-12.

We recommend that you upgrade your bind9 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: bind9
CVE ID: CVE-2017-3135

Topics%20covered

Topics Covered

security advisory bind9 dns exploit crash risk debian jessie

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here