Lucene search

K
ubuntuUbuntuUSN-2693-1
HistoryJul 28, 2015 - 12:00 a.m.

Bind vulnerabilities

2015-07-2800:00:00
ubuntu.com
35

7.8 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.972 High

EPSS

Percentile

99.8%

Releases

  • Ubuntu 15.04
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • bind9 - Internet Domain Name Server

Details

Jonathan Foote discovered that Bind incorrectly handled certain TKEY
queries. A remote attacker could use this issue with a specially crafted
packet to cause Bind to crash, resulting in a denial of service.
(CVE-2015-5477)

Pories Ediansyah discovered that Bind incorrectly handled certain
configurations involving DNS64. A remote attacker could use this issue with
a specially crafted query to cause Bind to crash, resulting in a denial of
service. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-5689)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchbind9<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchbind9-doc<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchbind9-host<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchbind9utils<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchdnsutils<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchhost<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchlibbind-dev<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchlibbind-export-dev<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchlibbind9-90<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Ubuntu15.04noarchlibdns-export100<Β 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN
Rows per page:
1-10 of 471

7.8 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.972 High

EPSS

Percentile

99.8%