USN-6421-1: Bind vulnerability
It was discovered that Bind incorrectly handled certain control channel messages. A remote attacker with access to the control channel could possibly use this issue to cause Bind to crash, resulting in a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Bind vulnerability?
The vulnerability ID is USN-6421-1.
What is the title of this vulnerability?
The title of this vulnerability is USN-6421-1: Bind vulnerability.
What is the description of this Bind vulnerability?
The Bind vulnerability involves the incorrect handling of certain control channel messages, which allows a remote attacker with access to the control channel to crash Bind, resulting in a denial of service.
Which software versions are affected by this Bind vulnerability?
The affected software versions are: bind9 1:9.11.3+dfsg-1ubuntu1.19+esm2, libbind9-160 1:9.11.3+dfsg-1ubuntu1.19+esm2, bind9 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7, libbind9-140 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7, bind9 1:9.9.5.dfsg-3ubuntu0.19+esm11, and libbind9-90 1:9.9.5.dfsg-3ubuntu0.19+esm11.
How can I fix the Bind vulnerability (USN-6421-1)?
To fix the Bind vulnerability, you should update the affected software versions to the recommended remedies provided by Ubuntu.