[SECURITY] [DSA 2486-1] bind9 security update

2012-06-0521:08:48

lists.debian.org

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

0.904 High

EPSS

Percentile

98.8%

JSON

Debian Security Advisory DSA-2486-1 [email protected]
http://www.debian.org/security/ Florian Weimer
June 05, 2012 http://www.debian.org/security/faq

Package : bind9
Vulnerability : denial of service
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-1667

It was discovered that BIND, a DNS server, can crash while processing
resource records containing no data bytes. Both authoritative servers
and resolvers are affected.

For the stable distribution (squeeze), this problem has been fixed in
version 1:9.7.3.dfsg-1~squeeze5.

We recommend that you upgrade your bind9 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6i386lwresd< 1:9.7.3.dfsg-1~squeeze5lwresd_1:9.7.3.dfsg-1~squeeze5_i386.deb
Debian6sparclibdns69< 1:9.7.3.dfsg-1~squeeze5libdns69_1:9.7.3.dfsg-1~squeeze5_sparc.deb
Debian6mipsliblwres60< 1:9.7.3.dfsg-1~squeeze5liblwres60_1:9.7.3.dfsg-1~squeeze5_mips.deb
Debian6s390lwresd< 1:9.7.3.dfsg-1~squeeze5lwresd_1:9.7.3.dfsg-1~squeeze5_s390.deb
Debian6powerpclibdns69< 1:9.7.3.dfsg-1~squeeze5libdns69_1:9.7.3.dfsg-1~squeeze5_powerpc.deb
Debian6mipselliblwres60< 1:9.7.3.dfsg-1~squeeze5liblwres60_1:9.7.3.dfsg-1~squeeze5_mipsel.deb
Debian6mipslibisc62< 1:9.7.3.dfsg-1~squeeze5libisc62_1:9.7.3.dfsg-1~squeeze5_mips.deb
Debian6kfreebsd-i386bind9utils< 1:9.7.3.dfsg-1~squeeze5bind9utils_1:9.7.3.dfsg-1~squeeze5_kfreebsd-i386.deb
Debian6sparclibbind-dev< 1:9.7.3.dfsg-1~squeeze5libbind-dev_1:9.7.3.dfsg-1~squeeze5_sparc.deb
Debian6sparclwresd< 1:9.7.3.dfsg-1~squeeze5lwresd_1:9.7.3.dfsg-1~squeeze5_sparc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	i386	lwresd	< 1:9.7.3.dfsg-1~squeeze5	lwresd_1:9.7.3.dfsg-1~squeeze5_i386.deb
Debian	6	sparc	libdns69	< 1:9.7.3.dfsg-1~squeeze5	libdns69_1:9.7.3.dfsg-1~squeeze5_sparc.deb
Debian	6	mips	liblwres60	< 1:9.7.3.dfsg-1~squeeze5	liblwres60_1:9.7.3.dfsg-1~squeeze5_mips.deb
Debian	6	s390	lwresd	< 1:9.7.3.dfsg-1~squeeze5	lwresd_1:9.7.3.dfsg-1~squeeze5_s390.deb
Debian	6	powerpc	libdns69	< 1:9.7.3.dfsg-1~squeeze5	libdns69_1:9.7.3.dfsg-1~squeeze5_powerpc.deb
Debian	6	mipsel	liblwres60	< 1:9.7.3.dfsg-1~squeeze5	liblwres60_1:9.7.3.dfsg-1~squeeze5_mipsel.deb
Debian	6	mips	libisc62	< 1:9.7.3.dfsg-1~squeeze5	libisc62_1:9.7.3.dfsg-1~squeeze5_mips.deb
Debian	6	kfreebsd-i386	bind9utils	< 1:9.7.3.dfsg-1~squeeze5	bind9utils_1:9.7.3.dfsg-1~squeeze5_kfreebsd-i386.deb
Debian	6	sparc	libbind-dev	< 1:9.7.3.dfsg-1~squeeze5	libbind-dev_1:9.7.3.dfsg-1~squeeze5_sparc.deb
Debian	6	sparc	lwresd	< 1:9.7.3.dfsg-1~squeeze5	lwresd_1:9.7.3.dfsg-1~squeeze5_sparc.deb