Paketname
bind
Datum
2012-12-05
Advisory ID
MDVSA-2012:177
Betroffene Versionen
2011 i586 , 2011 x86_64

Problembeschreibung

A vulnerability was discovered and corrected in bind:

BIND 9 nameservers using the DNS64 IPv6 transition mechanism are
vulnerable to a software defect that allows a crafted query to crash
the server with a REQUIRE assertion failure. Remote exploitation
of this defect can be achieved without extensive effort, resulting
in a denial-of-service (DoS) vector against affected servers
(CVE-2012-5688).

The updated packages have been upgraded to bind 9.8.4-P1 which is
not vulnerable to this issue.

Aktualisierte Pakete

2011 i586

 66bdbc7b626996ea2ce4771aa9504cf7  2011/i586/bind-9.8.4-0.0.P1.0.1-mdv2011.0.i586.rpm
 f3ff266312bc9c89c1b70c8bc2a68ce5  2011/i586/bind-devel-9.8.4-0.0.P1.0.1-mdv2011.0.i586.rpm
 3d1801ced41b296442954edfe226200f  2011/i586/bind-doc-9.8.4-0.0.P1.0.1-mdv2011.0.i586.rpm
 5260c5359ba15554d18658200337b21e  2011/i586/bind-utils-9.8.4-0.0.P1.0.1-mdv2011.0.i586.rpm 
 19e315c74dd39bc3daed386f9bafda0b  2011/SRPMS/bind-9.8.4-0.0.P1.0.1.src.rpm

2011 x86_64

 98d25a8e80c2ae965e108bd47d327331  2011/x86_64/bind-9.8.4-0.0.P1.0.1-mdv2011.0.x86_64.rpm
 24b3b7e32fe30433bbc3ebc6da14252b  2011/x86_64/bind-devel-9.8.4-0.0.P1.0.1-mdv2011.0.x86_64.rpm
 09b0579ab3053e306453e1d9a77de0f9  2011/x86_64/bind-doc-9.8.4-0.0.P1.0.1-mdv2011.0.x86_64.rpm
 8d375b75c5f340bf71b633672367eb84  2011/x86_64/bind-utils-9.8.4-0.0.P1.0.1-mdv2011.0.x86_64.rpm 
 19e315c74dd39bc3daed386f9bafda0b  2011/SRPMS/bind-9.8.4-0.0.P1.0.1.src.rpm

Referenzen