Lucene search

K
osvGoogleOSV:DSA-3703-1
HistoryNov 01, 2016 - 12:00 a.m.

bind9 - security update

2016-11-0100:00:00
Google
osv.dev
14

EPSS

0.951

Percentile

99.3%

Tony Finch and Marco Davids reported an assertion failure in BIND, a
DNS server implementation, which causes the server process to
terminate. This denial-of-service vulnerability is related to a
defect in the processing of responses with DNAME records from
authoritative servers and primarily affects recursive resolvers.

For the stable distribution (jessie), this problem has been fixed in
version 1:9.9.5.dfsg-9+deb8u8.

We recommend that you upgrade your bind9 packages.