Bind could be made to crash or run programs if it received specially crafted network traffic.. =========================================================================Ubuntu Security Notice USN-4737-1 February 18, 2021 bind9 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Bind could be made to crash or run programs if it received specially crafted network traffic. Software Description: - bind9: Internet Domain Name Server Details: It was discovered that Bind incorrectly handled GSSAPI security policy negotiation. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, attackers would be isolated by the Bind AppArmor profile. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.10: bind9 1:9.16.6-3ubuntu1.1 Ubuntu 20.04 LTS: bind9 1:9.16.1-0ubuntu2.6 Ubuntu 18.04 LTS: bind9 1:9.11.3+dfsg-1ubuntu1.14 Ubuntu 16.04 LTS: bind9 1:9.10.3.dfsg.P4-8ubuntu1.18 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4737-1 CVE-2020-8625 Package Information: https://launchpad.net/ubuntu/+source/bind9/1:9.16.6-3ubuntu1.1 https://launchpad.net/ubuntu/+source/bind9/1:9.16.1-0ubuntu2.6 https://launchpad.net/ubuntu/+source/bind9/1:9.11.3+dfsg-1ubuntu1.14 https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-8ubuntu1.18 . An exploit in systemd on Ubuntu may cause system instability or enable unauthorized command execution via crafted network packets. Update your system for better security. Bind9Vulnerability, Denial Of Service, Network Traffic Issue. . Severity: Critical. LinuxSecurity.com Team
ppp could be made to crash if it received specially crafted network traffic.. =========================================================================Ubuntu Security Notice USN-2595-1 May 05, 2015 ppp vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.10 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: ppp could be made to crash if it received specially crafted network traffic. Software Description: - ppp: Point-to-Point Protocol (PPP) Details: It was discovered that ppp incorrectly handled large PIDs. When pppd is used with a RADIUS server, a remote attacker could use this issue to cause it to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.10: ppp 2.4.5-5.1ubuntu3.2 Ubuntu 14.04 LTS: ppp 2.4.5-5.1ubuntu2.2 Ubuntu 12.04 LTS: ppp 2.4.5-5ubuntu1.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2595-1 CVE-2015-3310 Package Information: https://launchpad.net/ubuntu/+source/ppp/2.4.5-5.1ubuntu3.2 https://launchpad.net/ubuntu/+source/ppp/2.4.5-5.1ubuntu2.2 https://launchpad.net/ubuntu/+source/ppp/2.4.5-5ubuntu1.2 . Debian Security Notice DSN-4522-1 highlights a networkd problem initiated by specially forged packets, resulting in potential downtime.. Ubuntu Security, ppp Crash, Denial of Service, Network Traffic Issue. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.