Ubuntu 2081-1 Security Alert: bind9 Denial of Service Vulnerability

ubuntu

January 13, 2014

Bind could be made to crash if it received specially crafted network traffic.

Summary

Bind could be made to crash if it received specially crafted network

traffic.

Software Description:

- bind9: Internet Domain Name Server

Details:

Jared Mauch discovered that Bind incorrectly handled certain queries for

NSEC3-signed zones. A remote attacker could use this flaw with a specially

crafted query to cause Bind to stop responding, resulting in a denial of

service.

Topics Covered

security advisory Ubuntu Denial of Service bind9 network issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  bind9                           1:9.9.3.dfsg.P2-4ubuntu1.1

Ubuntu 13.04:
  bind9                           1:9.9.2.dfsg.P1-2ubuntu2.2

Ubuntu 12.10:
  bind9                           1:9.8.1.dfsg.P1-4.2ubuntu3.4

Ubuntu 12.04 LTS:
  bind9                           1:9.8.1.dfsg.P1-4ubuntu0.8

Ubuntu 10.04 LTS:
  bind9                           1:9.7.0.dfsg.P1-1ubuntu0.11

In general, a standard system update will make all the necessary changes.