Vulnerability in bind9 - security update
Summary
DSA-3449-1: bind9 - security update. Affects bind9 versions < 1:9.8.4.dfsg.P1-6+nmu2+deb7u9. Fixed in 1:9.8.4.dfsg.P1-6+nmu2+deb7u9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bind9 is a DNS server software package used for resolving domain names to IP addresses. It is a critical component of the internet infrastructure and is widely used across various operating systems. This vulnerability affects bind9 versions 9.8.4.dfsg.P1-6+nmu2+deb7u9 (Debian 7) and 9.9.5.dfsg-9+deb8u5 (Debian 8).
Vulnerability Detail
The vulnerability in bind9 is triggered by specific APL RR data, which can cause an INSIST failure in apl_42.c. This failure leads to the BIND DNS server exiting unexpectedly, resulting in a denial-of-service condition. An attacker can exploit this vulnerability by sending specially crafted DNS queries to a vulnerable bind9 server. The impact of this vulnerability is the disruption of DNS resolution services, potentially affecting the availability of websites and other network services relying on the affected bind9 server.
How To Fix
Minimum fixed version
1:9.8.4.dfsg.P1-6+nmu2+deb7u9
This is the first release that contains the fix.
sudo apt-get install --only-upgrade bind9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading the bind9 package to the fixed versions.
Conclusion
The vulnerability in bind9 can lead to a denial-of-service condition by causing the BIND DNS server to exit unexpectedly. To mitigate this risk, it is essential to upgrade the bind9 package to the fixed versions. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind9 →
FAQ
bind9 is a DNS server software package used for resolving domain names to IP addresses.
The vulnerability affects bind9 versions 9.8.4.dfsg.P1-6+nmu2+deb7u9 (Debian 7) and 9.9.5.dfsg-9+deb8u5 (Debian 8).
An attacker can exploit this vulnerability by sending specially crafted DNS queries to a vulnerable bind9 server.
The impact of this vulnerability is the disruption of DNS resolution services, potentially affecting the availability of websites and other network services relying on the affected bind9 server.
No, there is no known workaround for this vulnerability. It is crucial to apply the recommended fix by upgrading the bind9 package.
Related vulnerabilities
Recent vulnerabilities recorded for bind9.
