[SECURITY] [DLA 112-1] bind9 security update

2014-12-1518:43:58

lists.debian.org

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.898 High

EPSS

Percentile

98.7%

JSON

Package : bind9
Version : 9.7.3.dfsg-1~squeeze13
CVE ID : CVE-2014-8500
Debian Bug : 772610

This update fixes a denial of service vulnerability in BIND, a DNS server.

By making use of maliciously-constructed zones or a rogue server, an attacker
could exploit an oversight in the code BIND 9 used to follow delegations in
the Domain Name Service, causing BIND to issue unlimited queries in an attempt
to follow the delegation.

This can lead to resource exhaustion and denial of service (up to and
including termination of the named server process).
Attachment:
signature.asc
Description: This is a digitally signed message part.

OSVersionArchitecturePackageVersionFilename
Debian7powerpclibisc84< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3libisc84_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_powerpc.deb
Debian7kfreebsd-i386bind9-host< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3bind9-host_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_kfreebsd-i386.deb
Debian6i386dnsutils< 1:9.7.3.dfsg-1~squeeze13dnsutils_1:9.7.3.dfsg-1~squeeze13_i386.deb
Debian7ia64libdns88< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_ia64.deb
Debian7mipselbind9< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3bind9_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_mipsel.deb
Debian6i386libisccc60< 1:9.7.3.dfsg-1~squeeze13libisccc60_1:9.7.3.dfsg-1~squeeze13_i386.deb
Debian6i386lwresd< 1:9.7.3.dfsg-1~squeeze13lwresd_1:9.7.3.dfsg-1~squeeze13_i386.deb
Debian7amd64bind9utils< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3bind9utils_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_amd64.deb
Debian7mipsellibdns88< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_mipsel.deb
Debian6amd64libdns69< 1:9.7.3.dfsg-1~squeeze13libdns69_1:9.7.3.dfsg-1~squeeze13_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	powerpc	libisc84	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3	libisc84_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_powerpc.deb
Debian	7	kfreebsd-i386	bind9-host	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3	bind9-host_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_kfreebsd-i386.deb
Debian	6	i386	dnsutils	< 1:9.7.3.dfsg-1~squeeze13	dnsutils_1:9.7.3.dfsg-1~squeeze13_i386.deb
Debian	7	ia64	libdns88	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3	libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_ia64.deb
Debian	7	mipsel	bind9	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3	bind9_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_mipsel.deb
Debian	6	i386	libisccc60	< 1:9.7.3.dfsg-1~squeeze13	libisccc60_1:9.7.3.dfsg-1~squeeze13_i386.deb
Debian	6	i386	lwresd	< 1:9.7.3.dfsg-1~squeeze13	lwresd_1:9.7.3.dfsg-1~squeeze13_i386.deb
Debian	7	amd64	bind9utils	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3	bind9utils_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_amd64.deb
Debian	7	mipsel	libdns88	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u3	libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u3_mipsel.deb
Debian	6	amd64	libdns69	< 1:9.7.3.dfsg-1~squeeze13	libdns69_1:9.7.3.dfsg-1~squeeze13_amd64.deb