CVE-2015-1349

Published: 18 February 2015

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.

Notes

code in lucid doesn't look vulnerable

Status

References

• https://kb.isc.org/article/AA-01235
• https://ubuntu.com/security/notices/USN-2503-1
• https://www.cve.org/CVERecord?id=CVE-2015-1349
• NVD
• Launchpad
• Debian