Vulnerability in bind9 - security update
Summary
DLA-696-1: bind9 - security update. Affects bind9 versions < 1:9.8.4.dfsg.P1-6+nmu2+deb7u13. Fixed in 1:9.8.4.dfsg.P1-6+nmu2+deb7u13. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bind9 is a DNS server implementation used for resolving domain names to IP addresses. It is commonly used in recursive resolvers. The vulnerability in bind9 is related to a defect in the processing of responses with DNAME records from authoritative servers. This vulnerability can lead to an assertion failure, causing the server process to terminate. It primarily affects recursive resolvers.
Vulnerability Detail
The vulnerability in bind9 allows an attacker to trigger an assertion failure, leading to a denial-of-service condition. This can be exploited by sending specially crafted responses with DNAME records from authoritative servers. When a recursive resolver receives such a response, it fails to handle it correctly, resulting in the termination of the server process. This vulnerability can be used to disrupt DNS resolution services and potentially impact the availability of affected systems.
How To Fix
Minimum fixed version
1:9.8.4.dfsg.P1-6+nmu2+deb7u13
This is the first release that contains the fix.
sudo apt-get install --only-upgrade bind9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the security update as soon as possible to mitigate the risk of exploitation.
Conclusion
The vulnerability in bind9 can be exploited to cause a denial-of-service condition. It is recommended to upgrade bind9 packages to the latest version to mitigate the risk. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for bind9 →
FAQ
bind9 is a DNS server implementation used for resolving domain names to IP addresses.
This vulnerability can lead to a denial-of-service condition, causing the bind9 server process to terminate and potentially impacting the availability of DNS resolution services.
This vulnerability primarily affects systems running bind9 as a recursive resolver.
No, there is no known workaround for this vulnerability. It is recommended to apply the security update to mitigate the risk.
The security update can be obtained from the official Debian repositories or through the package management system of the affected system.
Related vulnerabilities
Recent vulnerabilities recorded for bind9.
