[SECURITY] [DLA 48-1] bind9 security update

2014-09-05T19:30:22
ID DEBIAN:DLA-48-1:57B3D
Type debian
Reporter Debian
Modified 2014-09-05T19:30:22

Description

Package : bind9 Version : 9.7.3.dfsg-1~squeeze12 CVE ID : CVE-2014-0591 Debian Bug : 735190

Fix denial of service attack when processing NSEC3-signed zone queries, fixed by not calling memcpy with overlapping ranges in bin/named/query.c. - patch backported from 9.8.6-P2 by Marc Deslauriers from the Ubuntu Security team for USN-2081-1.