USN-5747-1

Dashboard / Vulnerabilities / USN-5747-1

USN-5747-1

Summary: bind9 vulnerabilities

Details: It was discovered that Bind incorrectly handled large query name when using lightweight resolver protocol. A remote attacker could use this issue to consume resources, leading to a denial of service. (CVE-2016-2775) It was discovered that Bind incorrectly handled large zone data size received via AXFR response. A remote authenticated attacker could use this issue to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-6170)

References: https://ubuntu.com/security/notices/USN-5747-1, https://ubuntu.com/security/CVE-2016-2775, https://ubuntu.com/security/CVE-2016-6170