CVE-2013-3919
Published: 6 June 2013
resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a record in a malformed zone.
Notes
Author | Note |
---|---|
seth-arnold | Versions 9.6-ESV-R9, 9.8.5, and 9.9.3 are affected |
Priority
Status
Package | Release | Status |
---|---|---|
bind9 Launchpad, Ubuntu, Debian |
lucid |
Not vulnerable
(1:9.7.0.dfsg.P1-1ubuntu0.9)
|
precise |
Not vulnerable
(1:9.8.1.dfsg.P1-4ubuntu0.6)
|
|
quantal |
Not vulnerable
(1:9.8.1.dfsg.P1-4.2ubuntu3.2)
|
|
raring |
Not vulnerable
(1:9.9.2.dfsg.P1-2ubuntu2)
|
|
upstream |
Released
(9.6-ESV-R9-P1, 9.8.5-P1, 9.9.3-P1)
|