Bug 1291176 (CVE-2015-8000)
| Summary: | CVE-2015-8000 bind: responses with a malformed class attribute can trigger an assertion failure in db.c | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Martin Prpič <mprpic> | ||||||||
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||||||
| Status: | CLOSED ERRATA | QA Contact: | |||||||||
| Severity: | high | Docs Contact: | |||||||||
| Priority: | high | ||||||||||
| Version: | unspecified | CC: | psklenar, security-response-team, slawomir, thozza, yohmura, yozone | ||||||||
| Target Milestone: | --- | Keywords: | Security | ||||||||
| Target Release: | --- | ||||||||||
| Hardware: | All | ||||||||||
| OS: | Linux | ||||||||||
| Whiteboard: | |||||||||||
| Fixed In Version: | bind 9.9.8-P2, bind 9.10.3-P2 | Doc Type: | Bug Fix | ||||||||
| Doc Text: |
A denial of service flaw was found in the way BIND processed certain records with malformed class attributes. A remote attacker could use this flaw to send a query to request a cached record with a malformed class attribute that would cause named functioning as an authoritative or recursive server to crash. Note: This issue affects authoritative servers as well as recursive servers, however authoritative servers are at limited risk if they perform authentication when making recursive queries to resolve addresses for servers listed in NS RRSETs.
|
Story Points: | --- | ||||||||
| Clone Of: | Environment: | ||||||||||
| Last Closed: | 2015-12-17 03:08:24 UTC | Type: | --- | ||||||||
| Regression: | --- | Mount Type: | --- | ||||||||
| Documentation: | --- | CRM: | |||||||||
| Verified Versions: | Category: | --- | |||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||
| Embargoed: | |||||||||||
| Bug Depends On: | 1291178, 1291179, 1291180, 1291181, 1291183, 1291184, 1291909, 1291910, 1300758, 1300760, 1300761 | ||||||||||
| Bug Blocks: | 1291188 | ||||||||||
| Attachments: |
|
||||||||||
|
Description
Martin Prpič
2015-12-14 08:59:37 UTC
Acknowledgements: Red Hat would like to thank ISC for reporting this issue. Created attachment 1105523 [details]
Relevant diff between 9.9.8-P2 and 9.9.8
Created attachment 1105569 [details] Extracted part of the fix for CVE-2015-8000 Created attachment 1105581 [details]
Patch for BIND 9.9.4
Public now via upstream advisory. External References: https://kb.isc.org/article/AA-01317 Created bind tracking bugs for this issue: Affects: fedora-all [bug 1291909] Created bind99 tracking bugs for this issue: Affects: fedora-all [bug 1291910] This issue has been addressed in the following products: Red Hat Enterprise Linux 5 Via RHSA-2015:2656 https://rhn.redhat.com/errata/RHSA-2015-2656.html This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 Via RHSA-2015:2655 https://rhn.redhat.com/errata/RHSA-2015-2655.html This issue has been addressed in the following products: Red Hat Enterprise Linux 5 Via RHSA-2015:2658 https://rhn.redhat.com/errata/RHSA-2015-2658.html Upstream commit applied to 9.9.8: https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commitdiff;h=490970d0614214b477085adf5aa021690194b0b8 bind99-9.9.8-1.P2.fc23, dhcp-4.3.3-7.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report. bind-9.10.3-7.P2.fc23, bind-dyndb-ldap-8.0-4.fc23, dnsperf-2.0.0.0-19.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report. bind-9.10.3-7.P2.fc22, bind-dyndb-ldap-7.0-6.fc22, dnsperf-2.0.0.0-19.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report. bind99-9.9.8-1.P2.fc22, dhcp-4.3.2-6.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report. This issue has been addressed in the following products: Red Hat Enterprise Linux 6.5 AUS - Server Only Red Hat Enterprise Linux 6.4 AUS - Server Only Via RHSA-2016:0078 https://rhn.redhat.com/errata/RHSA-2016-0078.html This issue has been addressed in the following products: Red Hat Enterprise Linux 6.6 EUS - Server and Compute Node Only Via RHSA-2016:0079 https://rhn.redhat.com/errata/RHSA-2016-0079.html |