1. Ubuntu Security Notices
  2. USN-808-1

USN-808-1: Bind vulnerability

Publication date

29 July 2009

Overview

Bind vulnerability

Releases

Packages

Details

Micha Krause discovered that Bind did not correctly validate certain
dynamic DNS update packets. An unauthenticated remote attacker could
send specially crafted traffic to crash the DNS server, leading to a
denial of service.

Micha Krause discovered that Bind did not correctly validate certain
dynamic DNS update packets. An unauthenticated remote attacker could
send specially crafted traffic to crash the DNS server, leading to a
denial of service.

Update instructions

In general, a standard system upgrade is sufficient to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
9.04 jaunty bind9 –  1:9.5.1.dfsg.P2-1ubuntu0.1
8.10 intrepid bind9 –  1:9.5.0.dfsg.P2-1ubuntu3.2
8.04 hardy bind9 –  1:9.4.2.dfsg.P2-2ubuntu0.2
6.06 dapper bind9 –  1:9.3.2-2ubuntu1.7

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›