Mageia: 2021-0560 Moderate: BIND Denial Of Service Risk
mageia
December 19, 2021
Updated bind packages fix security vulnerability: Kishore Kumar Kothapalli discovered that the lame server cache in BIND, a DNS server implementation, can be abused by an attacker...
Summary
Updated bind packages fix security vulnerability:
Kishore Kumar Kothapalli discovered that the lame server cache in BIND,
a DNS server implementation, can be abused by an attacker to significantly
degrade resolver performance, resulting in denial of service (large delays
for responses for client queries and DNS timeouts on client hosts)
(CVE-2021-25219).
References
- https://bugs.mageia.org/show_bug.cgi?id=29427
- https://kb.isc.org/docs/cve-2021-25219
- https://lists.debian.org/debian-security-announce/2021/msg00179.html
- https://www.cve.org/CVERecord?id=CVE-2021-25219
Topics Covered
Resolution
SRPMS
- 8/core/bind-9.11.36-1.1.mga8
PREVIOUS
NEXT
Publication date: 19 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0560.html
Type: security
CVE: CVE-2021-25219
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!