oss-security - CVE-2011-4313: BIND 9 Resolver crashes after logging an error in query.c

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20111116194325.GA17162@openwall.com>
Date: Wed, 16 Nov 2011 23:43:25 +0400
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: CVE-2011-4313: BIND 9 Resolver crashes after logging an error in query.c

Hi,

This says it was posted today:

http://www.isc.org/software/bind/advisories/cve-2011-4313

"Versions affected:
All currently supported versions of BIND, 9.4-ESV, 9.6-ESV, 9.7.x, 9.8.x"

Does anyone readily know if BIND 9.3.x is affected as well?  It is not
"currently supported" upstream (per the table below), but is still found
in and supported by some distros.

http://www.isc.org/software/bind/versions

Alexander

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.