[Secure-testing-team] Bug#791715: bind9: CVE-2015-4620: Specially Constructed Zone Data Can Cause a Resolver to Crash when Validating

Salvatore Bonaccorso carnil at debian.org
Tue Jul 7 19:59:59 UTC 2015


Source: bind9
Version: 1:9.7.3.dfsg-1
Severity: grave
Tags: security upstream fixed-upstream
Justification: user security hole
Control: fixed -1 1:9.9.5.dfsg-9+deb8u1

Hi,

the following vulnerability was published for bind9.

CVE-2015-4620[0]:
Specially Constructed Zone Data Can Cause a Resolver to Crash when Validating

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2015-4620
[1] https://kb.isc.org/article/AA-01267

Regards,
Salvatore



More information about the Secure-testing-team mailing list