bind9: denial of service [LWN.net]

Package(s):

bind9

CVE #(s):

CVE-2011-1910

Created:

May 31, 2011

Updated:

November 18, 2011

Description:

From the Debian advisory:

It was discovered that BIND, an implementation of the DNS protocol, does not correctly process certain large RRSIG record sets in DNSSEC responses. The resulting assertion failure causes the name server process to crash, making name resolution unavailable.

Alerts:

Oracle	ELSA-2011-1458	2011-11-18
Slackware	SSA:2011-224-01	2011-08-15
Fedora	FEDORA-2011-7621	2011-05-27
Fedora	FEDORA-2011-7602	2011-05-27
SUSE	SUSE-SU-2011:0608-1	2011-06-13
openSUSE	openSUSE-SU-2011:0603-1	2011-06-08
Fedora	FEDORA-2011-7617	2011-05-27
Mandriva	MDVSA-2011:104	2011-06-01
CentOS	CESA-2011:0845	2011-05-31
Red Hat	RHSA-2011:0845-01	2011-05-31
Ubuntu	USN-1139-1	2011-05-30
Slackware	SSA:2011-147-01	2011-05-31
Debian	DSA-2244-1	2011-05-27
Gentoo	201206-01	2012-06-02

(Log in to post comments)