Ubuntu 21.10 USN-5126-1 Critical: Bind9 Resource Denial of Service

ubuntu

October 28, 2021

Bind could be made to consume resources if it received specially crafted network traffic.

Summary

Bind could be made to consume resources if it received specially crafted

network traffic.

Software Description:

- bind9: Internet Domain Name Server

Details:

Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame

cache when processing responses. A remote attacker could possibly use this

issue to cause Bind to consume resources, resulting in a denial of service.

Topics Covered

security advisory denial of service Ubuntu resource consumption Bind9

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  bind9                           1:9.16.15-1ubuntu1.1

Ubuntu 21.04:
  bind9                           1:9.16.8-1ubuntu3.2

Ubuntu 20.04 LTS:
  bind9                           1:9.16.1-0ubuntu2.9

Ubuntu 18.04 LTS:
  bind9                           1:9.11.3+dfsg-1ubuntu1.16

In general, a standard system update will make all the necessary changes.