USN-3893-1

Dashboard / Vulnerabilities / USN-3893-1

USN-3893-1

Summary: bind9 vulnerabilities

Details: Toshifumi Sakaguchi discovered that Bind incorrectly handled memory. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-5744) It was discovered that Bind incorrectly handled certain trust anchors when used with the "managed-keys" feature. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2018-5745) It was discovered that Bind incorrectly handled certain controls for zone transfers, contrary to expectations. (CVE-2019-6465)

References: https://ubuntu.com/security/notices/USN-3893-1, https://ubuntu.com/security/CVE-2018-5744, https://ubuntu.com/security/CVE-2018-5745, https://ubuntu.com/security/CVE-2019-6465