Vulnerability Bulletins |
DSA-3162 bind9 - security update |
|
| Affected software | Debian |
|
Jan-Piet Mens discovered that the BIND DNS server would crash whenprocessing an invalid DNSSEC key rollover, either due to an error onthe zone operators part, or due to interference with network trafficby an attacker. This issue affects configurations with the directives"dnssec-validation auto;" (as enabled in the Debian defaultconfiguration) or "dnssec-lookaside auto;". More info: https://www.debian.org/security/2015/dsa-3162 |
|