Security Update for bind9
Summary
DLA-843-1: bind9 - security update. Affects bind9 versions < 1:9.8.4.dfsg.P1-6+nmu2+deb7u15. Fixed in 1:9.8.4.dfsg.P1-6+nmu2+deb7u15. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bind9 is a DNS server software package that provides domain name resolution services. It is widely used across various operating systems and is responsible for translating domain names into IP addresses. This vulnerability affects the bind9 package in Debian 7 Wheezy.
Vulnerability Detail
The vulnerability, identified as CVE-2017-3135, is an assertion failure that occurs when using DNS64 and RPZ (Response Policy Zones). This can lead to a crash of the bind9 service. The impact of this vulnerability can result in a denial of service, disrupting the DNS resolution functionality of the affected system.
How To Fix
Minimum fixed version
1:9.8.4.dfsg.P1-6+nmu2+deb7u15
This is the first release that contains the fix.
sudo apt-get install --only-upgrade bind9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
It is crucial to update the bind9 package to the recommended version to mitigate the vulnerability and ensure the stability and security of the DNS resolution service. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind9 →
FAQ
bind9 is a DNS server software package used for domain name resolution.
The vulnerability can lead to a crash of the bind9 service, resulting in a denial of service.
The vulnerability affects bind9 version 1:9.8.4.dfsg.P1-6+nmu2+deb7u15 and earlier in Debian 7 Wheezy.
To fix this vulnerability, upgrade the bind9 package to version 1:9.8.4.dfsg.P1-6+nmu2+deb7u15 or later.
More information about Debian LTS security advisories can be found at: https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for bind9.
