Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 534
Alerts This Week
Warning Icon 1 534

Linux: 1234-0 Moderate: Nginx Remote Crash Vulnerability Alert

ubuntu
Calendar Grey October 8, 2019
Dist Ubuntu Esm H88
Critical bug in Ubuntu's Unbound could cause a service disruption from corrupted NOTIFY requests. Immediate patch necessary.
Unbound could be made to crash if it received a specially crafted NOTIFY query.

Summary

Unbound could be made to crash if it received a specially crafted

NOTIFY query.

Software Description:

- unbound: validating, recursive, caching DNS resolver

Details:

It was discovered that Unbound incorrectly handled certain NOTIFY queries.

An attacker could possibly use this issue to cause a denial of service.

Topics%20covered

Topics Covered

security advisory Ubuntu system update software issue deny service unbound October 2019

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libunbound8                     1.9.0-2ubuntu0.1
  unbound                         1.9.0-2ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4149-1

CVE-2019-16866

Severity
important
Lowest
Low
Medium
High
Critical

October 08, 2019

Topics%20covered

Topics Covered

security advisory Ubuntu system update software issue deny service unbound October 2019

Package Information

https://launchpad.net/ubuntu/+source/unbound/1.9.0-2ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.