#26588 – CVE-2011-4313: BIND 9 Resolver crashes after logging an error in query.c

Bug 26588 - CVE-2011-4313: BIND 9 Resolver crashes after logging an error in query.c

Summary: CVE-2011-4313: BIND 9 Resolver crashes after logging an error in query.c

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	bind9.8 (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P3 blocker
Assignee:	Michael Shigorin
QA Contact:	qa-sisyphus

URL:	http://www.isc.org/software/bind/advi...
Keywords:	security

Depends on:
Blocks:

Reported:	2011-11-17 07:36 MSK by Vladimir Lettiev
Modified:	2012-05-06 01:56 MSK (History)
CC List:	1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Vladimir Lettiev 2011-11-17 07:36:18 MSK

An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure.

Patched version aviliable: https://www.isc.org/software/bind/981-p1

Comment 1

Repository Robot 2012-05-06 01:56:29 MSK

bind9.8-9.8.2-alt2 -> sisyphus:

* Sat May 05 2012 Michael Shigorin <mike@altlinux> 9.8.2-alt2
- dropped patch2
- doc/{draft,rfc} are there no more

* Sat Apr 21 2012 Michael Shigorin <mike@altlinux> 9.8.2-alt1
- 9.8.2 (closes: #26588)