Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Ubuntu 16.04 LTS USN-6909-3: Critical Vulnerabilities in Bind9 Service

ubuntu
Calendar Grey August 15, 2024
Dist Ubuntu Esm H88
Investigate the recent Bind security patches in Ubuntu; key vulnerabilities resolved, potential performance effects, and recommended actions detailed.
Several security issues were fixed in Bind.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Bind. Software Description: - bind9: Internet Domain Name Server Details: USN-6909-1 fixed vulnerabilities in Bind. This update provides the corresponding updates for Ubuntu 16.04 LTS. Original advisory details:  Toshifumi Sakaguchi discovered that Bind incorrectly handled having a very  large number of RRs existing at the same time. A remote attacker could  possibly use this issue to cause Bind to consume resources, leading to a  denial of service. (CVE-2024-1737)  It was discovered that Bind incorrectly handled a large number of SIG(0)  signed requests. A remote attacker could possibly use this issue to cause  Bind to consume resources, leading to a denial of service. (CVE-2024-1975)

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS   bind9 1:9.10.3.dfsg.P4-8ubuntu1.19+esm9                                   Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-6909-3

  https://ubuntu.com/security/notices/USN-6909-2

  https://ubuntu.com/security/notices/USN-6909-1

  CVE-2024-1737, CVE-2024-1975

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6909-3

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here