Ubuntu 2669-1: Bind DoS - Crash Due to Crafted Zone Data

ubuntu

July 7, 2015

Bind could be made to crash if it received specially crafted network traffic.

Summary

Bind could be made to crash if it received specially crafted network

traffic.

Software Description:

- bind9: Internet Domain Name Server

Details:

Breno Silveira Soares discovered that Bind incorrectly handled certain

zone data when configured to perform DNSSEC validation. A remote attacker

could use this issue with specially crafted zone data to cause Bind to

crash, resulting in a denial of service.

Topics Covered

security advisory denial of service package update network traffic ubuntu bind9

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  bind9                           1:9.9.5.dfsg-9ubuntu0.1

Ubuntu 14.10:
  bind9                           1:9.9.5.dfsg-4.3ubuntu0.3

Ubuntu 14.04 LTS:
  bind9                           1:9.9.5.dfsg-3ubuntu0.3

Ubuntu 12.04 LTS:
  bind9                           1:9.8.1.dfsg.P1-4ubuntu0.11

In general, a standard system update will make all the necessary changes.