USN-2925-1
Dashboard / Vulnerabilities / USN-2925-1
USN-2925-1
Summary: bind9 vulnerabilities
Details: It was discovered that Bind incorrectly handled input received by the rndc control channel. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2016-1285) It was discovered that Bind incorrectly parsed resource record signatures for DNAME resource records. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2016-1286)
References: https://ubuntu.com/security/notices/USN-2925-1, https://ubuntu.com/security/CVE-2016-1285, https://ubuntu.com/security/CVE-2016-1286
Affected packages
Package
Name: bind9
Purl: pkg:deb/ubuntu/bind9@1:9.9.5.dfsg-3ubuntu0.8?arch=source&distro=trusty
Affected ranges
Type: ECOSYSTEM
Events:
