New DoS Vulnerability In All Versions of BIND 9

Posted by kdawson on Tuesday July 28, 2009 @02:02PM from the binding-with-briars-my-joys-and-desires dept.

Icemaann writes "ISC is reporting that a new, remotely exploitable vulnerability has been found in all versions of BIND 9. A specially crafted dynamic update packet will make BIND die with an assertion error. There is an exploit in the wild and there are no access control workarounds. Red Hat claims that the exploit does not affect BIND servers that do not allow dynamic updates, but the ISC post refutes that. This is a high-priority vulnerability and DNS operators will want to upgrade BIND to the latest patch level."

3 of 197 comments (clear)

Re:Interesting by Minwee · 2009-07-28 15:58 · Score: 5, Funny

It is now.
This vulnerability also gives the three people running DJB DNS a much needed opportunity for some smugness.
Re:Interesting by kriebz · 2009-07-28 16:25 · Score: 5, Funny

I was under the impression they had smugness to spare.
Re:All versions of Bind 9? by tygerstripes · 2009-07-28 20:34 · Score: 5, Funny

But it's a DOS vulnerability!!! Sheesh, read the title...

--
Meta will eat itself