#25673 – CVE-2011-1910: Large RRSIG RRsets and Negative Caching can crash named

Bug 25673 - CVE-2011-1910: Large RRSIG RRsets and Negative Caching can crash named

Summary: CVE-2011-1910: Large RRSIG RRsets and Negative Caching can crash named

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	bind9.8 (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P3 blocker
Assignee:	Michael Shigorin
QA Contact:	qa-sisyphus

URL:	http://www.isc.org/software/bind/advi...
Keywords:	security

Depends on:
Blocks:

Reported:	2011-05-27 13:08 MSK by Vladimir Lettiev
Modified:	2011-08-12 14:02 MSK (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Vladimir Lettiev 2011-05-27 13:08:08 MSK

A BIND 9 DNS server set up to be a caching resolver is vulnerable to a user querying a domain with very large resource record sets (RRSets) when trying to negatively cache a response. This can cause the BIND 9 DNS server (named process) to crash.
Upgrade to 9.8.0-P2

Comment 1

Vladimir Lettiev 2011-08-12 14:01:11 MSK

 * Sun Jun 12 2011 Victor Forsiuk <force@altlinux.org> 9.8.0-alt0.2
 - 9.8.0-P2 (security fixes for CVE-2011-1907 and CVE-2011-1910).