[SECURITY] [DLA 163-1] bind9 security update

2015-03-0118:49:45

lists.debian.org

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

Confidence

High

EPSS

0.07

Percentile

94.1%

JSON

Package : bind9
Version : 1:9.7.3.dfsg-1~squeeze14
CVE ID : CVE-2015-1349
Debian Bug : 778733

Jan-Piet Mens discovered that the BIND DNS server would crash when
processing an invalid DNSSEC key rollover, either due to an error on
the zone operator's part, or due to interference with network traffic
by an attacker. This issue affects configurations with the directives
"dnssec-validation auto;" (as enabled in the Debian default
configuration) or "dnssec-lookaside auto;".

OSVersionArchitecturePackageVersionFilename
Debian6amd64dnsutils< 1:9.7.3.dfsg-1~squeeze14dnsutils_1:9.7.3.dfsg-1~squeeze14_amd64.deb
Debian7powerpclibdns88< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_powerpc.deb
Debian7kfreebsd-i386libisc84< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4libisc84_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_kfreebsd-i386.deb
Debian7sparclibdns88< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_sparc.deb
Debian6amd64libisccc60< 1:9.7.3.dfsg-1~squeeze14libisccc60_1:9.7.3.dfsg-1~squeeze14_amd64.deb
Debian7armelliblwres80< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4liblwres80_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_armel.deb
Debian7sparclibisc84< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4libisc84_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_sparc.deb
Debian7ia64libdns88< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_ia64.deb
Debian7sparcdnsutils< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4dnsutils_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_sparc.deb
Debian7powerpclibisccc80< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4libisccc80_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_powerpc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	amd64	dnsutils	< 1:9.7.3.dfsg-1~squeeze14	dnsutils_1:9.7.3.dfsg-1~squeeze14_amd64.deb
Debian	7	powerpc	libdns88	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4	libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_powerpc.deb
Debian	7	kfreebsd-i386	libisc84	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4	libisc84_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_kfreebsd-i386.deb
Debian	7	sparc	libdns88	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4	libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_sparc.deb
Debian	6	amd64	libisccc60	< 1:9.7.3.dfsg-1~squeeze14	libisccc60_1:9.7.3.dfsg-1~squeeze14_amd64.deb
Debian	7	armel	liblwres80	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4	liblwres80_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_armel.deb
Debian	7	sparc	libisc84	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4	libisc84_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_sparc.deb
Debian	7	ia64	libdns88	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4	libdns88_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_ia64.deb
Debian	7	sparc	dnsutils	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4	dnsutils_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_sparc.deb
Debian	7	powerpc	libisccc80	< 1:9.8.4.dfsg.P1-6+nmu2+deb7u4	libisccc80_1:9.8.4.dfsg.P1-6+nmu2+deb7u4_powerpc.deb