Bug 514481

Summary: BIND denial of service (server crash) caused by receipt of a specific remote dynamic update message
Product: Red Hat Enterprise Linux 5 Reporter: Stefan Neufeind <redhat>
Component: bindAssignee: Adam Tkac <atkac>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE <qe-baseos-auto>
Severity: urgent Docs Contact:
Priority: low    
Version: 5.3CC: ovasik, reed
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-07-29 11:29:53 EDT Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Description Stefan Neufeind 2009-07-29 06:18:02 EDT

Receipt of a specially-crafted dynamic update message to a zone for which the server is the master may cause BIND 9 servers to exit. Testing indicates that the attack packet has to be formulated against a zone for which that machine is a master. Launching the attack against slave zones does not trigger the assert.

This vulnerability affects all servers that are masters for one or more zones – it is not limited to those that are configured to allow dynamic updates. Access controls will not provide an effective workaround.
Comment 1 Stefan Neufeind 2009-07-29 06:26:28 EDT
Duplicate of #514292.
(Unfortunately it seems I can't update the status of my own ticket to duplicate?)
Comment 2 Adam Tkac 2009-07-29 11:29:53 EDT

*** This bug has been marked as a duplicate of bug 514292 ***