Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

Mageia 7 MGASA-2021-0275 Moderate: Bind IXFR Assertion Failure

mageia
Calendar Grey June 23, 2021
Dist Mageia Esm H88
Revised bind packages from Mageia resolve a critical IXFR-associated security vulnerability impacting the bind server.
Incremental zone transfers (IXFR) provide a way of transferring changed portion(s) of a zone between servers

Summary

Incremental zone transfers (IXFR) provide a way of transferring changed portion(s) of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in question from the zone database. This leads to an assertion failure when the next SOA refresh query for that zone is made (CVE-2021-25214).

References

- https://bugs.mageia.org/show_bug.cgi?id=28978

- https://kb.isc.org/v1/docs/cve-2021-25214

- https://lists.debian.org/debian-security-announce/2021/msg00090.html

- https://www.cve.org/CVERecord?id=CVE-2021-25214

Topics%20covered

Topics Covered

security advisory moderate assertion failure Mageia IXFR issue Bind server

Resolution

SRPMS

- 7/core/bind-9.11.6-1.5.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0275.html
Type: security
CVE: CVE-2021-25214

Topics%20covered

Topics Covered

security advisory moderate assertion failure Mageia IXFR issue Bind server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here