[SECURITY] [DLA 163-1] bind9 security update

2015-03-0119:00:55

lists.debian.org

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.069 Low

EPSS

Percentile

93.9%

JSON

Package : bind9
Version : 1:9.7.3.dfsg-1~squeeze14
CVE ID : CVE-2015-1349
Debian Bug : 778733

Jan-Piet Mens discovered that the BIND DNS server would crash when
processing an invalid DNSSEC key rollover, either due to an error on
the zone operator's part, or due to interference with network traffic
by an attacker. This issue affects configurations with the directives
"dnssec-validation auto;" (as enabled in the Debian default
configuration) or "dnssec-lookaside auto;".

OSVersionArchitecturePackageVersionFilename
Debian6allbind9-host< 1:9.7.3.dfsg-1~squeeze14bind9-host_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6allbind9utils< 1:9.7.3.dfsg-1~squeeze14bind9utils_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6allhost< 1:9.7.3.dfsg-1~squeeze14host_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6alllibisccc60< 1:9.7.3.dfsg-1~squeeze14libisccc60_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6allbind9-doc< 1:9.7.3.dfsg-1~squeeze14bind9-doc_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6alllibisc62< 1:9.7.3.dfsg-1~squeeze14libisc62_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6alllibisccfg62< 1:9.7.3.dfsg-1~squeeze14libisccfg62_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6allbind9< 1:9.7.3.dfsg-1~squeeze14bind9_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6alllwresd< 1:9.7.3.dfsg-1~squeeze14lwresd_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian6alllibbind-dev< 1:9.7.3.dfsg-1~squeeze14libbind-dev_1:9.7.3.dfsg-1~squeeze14_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	bind9-host	< 1:9.7.3.dfsg-1~squeeze14	bind9-host_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	bind9utils	< 1:9.7.3.dfsg-1~squeeze14	bind9utils_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	host	< 1:9.7.3.dfsg-1~squeeze14	host_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	libisccc60	< 1:9.7.3.dfsg-1~squeeze14	libisccc60_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	bind9-doc	< 1:9.7.3.dfsg-1~squeeze14	bind9-doc_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	libisc62	< 1:9.7.3.dfsg-1~squeeze14	libisc62_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	libisccfg62	< 1:9.7.3.dfsg-1~squeeze14	libisccfg62_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	bind9	< 1:9.7.3.dfsg-1~squeeze14	bind9_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	lwresd	< 1:9.7.3.dfsg-1~squeeze14	lwresd_1:9.7.3.dfsg-1~squeeze14_all.deb
Debian	6	all	libbind-dev	< 1:9.7.3.dfsg-1~squeeze14	libbind-dev_1:9.7.3.dfsg-1~squeeze14_all.deb