BIND9 - Denial of Service Vulnerability
Summary
DSA-3319-1: bind9 - security update. Affects bind9 versions < 1:9.8.4.dfsg.P1-6+nmu2+deb7u6. Fixed in 1:9.8.4.dfsg.P1-6+nmu2+deb7u6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
BIND9 is a DNS server software package that provides domain name resolution services. It is widely used in various operating systems and is responsible for translating domain names into IP addresses. The vulnerability in BIND9 allows remote attackers to exploit the server's handling of TKEY queries, leading to a denial of service attack. By sending a specially crafted query, an attacker can trigger an assertion failure, causing BIND to exit unexpectedly.
Vulnerability Detail
The vulnerability in BIND9 arises from its improper handling of TKEY queries. When a remote attacker sends a malicious query, the server fails to handle it correctly, resulting in an assertion failure. This assertion failure causes BIND to terminate abruptly, leading to a denial of service condition. This vulnerability can be exploited remotely without requiring any authentication or user interaction. The impact of this vulnerability is limited to a denial of service attack, and there is no evidence of it being used for further exploitation or data exfiltration.
How To Fix
Minimum fixed version
1:9.8.4.dfsg.P1-6+nmu2+deb7u6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade bind9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix by upgrading the bind9 package to the fixed versions.
Conclusion
The vulnerability in BIND9's handling of TKEY queries can be exploited remotely to cause a denial of service attack. To mitigate this vulnerability, it is recommended to upgrade the bind9 package to the fixed versions. No known workaround exists for this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind9 →
FAQ
BIND9 is a DNS server software package used for domain name resolution services.
The vulnerability allows remote attackers to cause a denial of service by triggering an assertion failure in BIND9, leading to the server's unexpected termination.
Yes, this vulnerability can be exploited remotely without requiring any authentication or user interaction.
No, there is no evidence of this vulnerability being used for further exploitation or data exfiltration. Its impact is limited to a denial of service attack.
No, there is no known workaround for this vulnerability. It is crucial to apply the provided fix by upgrading the bind9 package to the fixed versions.
Related vulnerabilities
Recent vulnerabilities recorded for bind9.
