Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Bind could be made to crash if it received specially crafted network
traffic.
Software Description:
- bind9: Internet Domain Name Server
Details:
Jake Montgomery discovered that Bind incorrectly handled certain specific
combinations of RDATA. A remote attacker could use this flaw to cause Bind
to crash, resulting in a denial of service.
The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: bind9 1:9.8.1.dfsg.P1-4ubuntu0.4 Ubuntu 11.10: bind9 1:9.7.3.dfsg-1ubuntu4.5 Ubuntu 11.04: bind9 1:9.7.3.dfsg-1ubuntu2.7 Ubuntu 10.04 LTS: bind9 1:9.7.0.dfsg.P1-1ubuntu0.8 Ubuntu 8.04 LTS: bind9 1:9.4.2.dfsg.P2-2ubuntu0.12 In general, a standard system update will make all the necessary changes.
https://ubuntu.com/security/notices/USN-1601-1
CVE-2012-5166
Get the latest Linux and open source security news straight to your inbox.