BIND9 - Remote Denial of Service Vulnerabilities
Summary
DSA-3511-1: bind9 - security update. Affects bind9 versions < 1:9.8.4.dfsg.P1-6+nmu2+deb7u10. Fixed in 1:9.8.4.dfsg.P1-6+nmu2+deb7u10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
BIND9 is an open-source DNS server software developed by the Internet Systems Consortium (ISC). It is widely used for hosting DNS zones and resolving domain names. BIND9 is a critical component of the internet infrastructure and is deployed on various operating systems. However, two vulnerabilities have been discovered in BIND9 that can lead to remote denial of service attacks.
Vulnerability Detail
The first vulnerability, identified as CVE-2016-1285, involves a flaw in the handling of maliciously crafted rdnc (remote administration) operations. An attacker can exploit this vulnerability to crash the BIND9 server, causing a denial of service. The second vulnerability, CVE-2016-1286, relates to an error in parsing DNAME resource records. By sending specially crafted DNS queries, an attacker can trigger a crash in BIND9, resulting in a denial of service.
How To Fix
Minimum fixed version
1:9.8.4.dfsg.P1-6+nmu2+deb7u10
This is the first release that contains the fix.
sudo apt-get install --only-upgrade bind9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading the BIND9 packages to the recommended versions is crucial to mitigate the remote denial of service vulnerabilities. Prompt action should be taken to ensure the security and stability of the BIND9 server. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for bind9 →
FAQ
BIND9 is an open-source DNS server software used for hosting DNS zones and resolving domain names.
The vulnerabilities in BIND9 are CVE-2016-1285 and CVE-2016-1286, which can lead to remote denial of service attacks.
The vulnerabilities can be exploited by sending maliciously crafted rdnc operations or specially crafted DNS queries to the BIND9 server.
The vulnerabilities can result in a crash of the BIND9 server, leading to denial of service and potential disruption of DNS services.
To fix these vulnerabilities, upgrade the BIND9 packages to the recommended versions provided for each distribution.
Related vulnerabilities
Recent vulnerabilities recorded for bind9.
