Bug 718971 (CVE-2011-2465) - CVE-2011-2465 bind: Remote Crash with Certain RPZ Configurations
Summary: CVE-2011-2465 bind: Remote Crash with Certain RPZ Configurations
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2011-2465
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 719041 719043
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-07-05 10:48 UTC by Huzaifa S. Sidhpurwala
Modified: 2021-02-24 15:07 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-07-12 07:36:03 UTC
Embargoed:

Attachments (Terms of Use)

Description Huzaifa S. Sidhpurwala 2011-07-05 10:48:08 UTC 
A defect was bound in certain versions of bind, which causes the "named"
process to exit when configured with certain RPZ configurations
Comment 2 Eugene Teo (Security Response) 2011-07-05 11:01:00 UTC 
The Red Hat Security Response Team is aware of the accidental disclosure of the ISC security advisories. We are working to find out more about the vulnerabilities addressed.

Reference:
http://risky.biz/auscert-bind
http://pastebin.com/9NUt8Pk0
Comment 4 Eugene Teo (Security Response) 2011-07-05 11:19:10 UTC 
http://article.gmane.org/gmane.comp.security.oss.general/5415
Comment 5 Tomas Hoger 2011-07-05 13:15:46 UTC 
Upstream advisory:
http://www.isc.org/software/bind/advisories/cve-2011-2465
Comment 6 Vincent Danen 2011-07-05 14:39:34 UTC 
Statement:

Not vulnerable. This issue did not affect the versions of bind as shipped with Red Hat Enterprise Linux 4, 5, or 6 as they did not include support for Response Policy Zones (RPZ).
Comment 7 Vincent Danen 2011-07-05 15:08:31 UTC 
Created bind tracking bugs for this issue

Affects: fedora-15 [bug 719041]
Affects: fedora-rawhide [bug 719043]
Note You need to log in before you can comment on or make changes to this bug.