Ubuntu 20.10: USN-4737-1 Critical: BIND Denial Of Service

ubuntu

February 18, 2021

Bind could be made to crash or run programs if it received specially crafted network traffic.

Summary

Bind could be made to crash or run programs if it received specially

crafted network traffic.

Software Description:

- bind9: Internet Domain Name Server

Details:

It was discovered that Bind incorrectly handled GSSAPI security policy

negotiation. A remote attacker could use this issue to cause Bind to crash,

resulting in a denial of service, or possibly execute arbitrary code. In

the default installation, attackers would be isolated by the Bind AppArmor

profile.

Topics Covered

security advisory denial of service remote code execution ubuntu bind9 network issue network traffic issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  bind9                           1:9.16.6-3ubuntu1.1

Ubuntu 20.04 LTS:
  bind9                           1:9.16.1-0ubuntu2.6

Ubuntu 18.04 LTS:
  bind9                           1:9.11.3+dfsg-1ubuntu1.14

Ubuntu 16.04 LTS:
  bind9                           1:9.10.3.dfsg.P4-8ubuntu1.18

In general, a standard system update will make all the necessary changes.