A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named, such as a recursion loop or excessive logging. Deliberate exploitation of this condition could cause operational problems depending on the particular manifestation – either degradation or denial of service. Affects BIND 9.12.0 and 9.12.1.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | edge-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.10-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.11-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.12-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.13-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.14-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.15-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.16-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.17-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |
Alpine | 3.18-main | noarch | bind | < 9.12.1_p2-r0 | UNKNOWN |