Ubuntu 16.10 USN-3119-1 Critical Bind Denial Of Service

ubuntu

November 1, 2016

Bind could be made to crash if it received specially crafted network traffic.

Summary

Bind could be made to crash if it received specially crafted network

traffic.

Software Description:

- bind9: Internet Domain Name Server

Details:

Tony Finch and Marco Davids discovered that Bind incorrectly handled

certain responses containing a DNAME answer. A remote attacker could

possibly use this issue to cause Bind to crash, resulting in a denial of

service.

Topics Covered

security advisory denial of service bind ubuntu service crash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  bind9                           1:9.10.3.dfsg.P4-10.1ubuntu1.1

Ubuntu 16.04 LTS:
  bind9                           1:9.10.3.dfsg.P4-8ubuntu1.2

Ubuntu 14.04 LTS:
  bind9                           1:9.9.5.dfsg-3ubuntu0.10

Ubuntu 12.04 LTS:
  bind9                           1:9.8.1.dfsg.P1-4ubuntu0.19

In general, a standard system update will make all the necessary changes.