USN-2693-1

Dashboard / Vulnerabilities / USN-2693-1

USN-2693-1

Summary: bind9 vulnerabilities

Details: Jonathan Foote discovered that Bind incorrectly handled certain TKEY queries. A remote attacker could use this issue with a specially crafted packet to cause Bind to crash, resulting in a denial of service. (CVE-2015-5477) Pories Ediansyah discovered that Bind incorrectly handled certain configurations involving DNS64. A remote attacker could use this issue with a specially crafted query to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-5689)

References: https://ubuntu.com/security/notices/USN-2693-1, https://ubuntu.com/security/CVE-2012-5689, https://ubuntu.com/security/CVE-2015-5477