ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "bind9"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "bind9-doc"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "bind9-host"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "bind9utils"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "dnsutils"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "host"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "libbind-dev"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "libbind9-90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "libdns100"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "libisc95"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "libisccc90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "libisccfg90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "liblwres90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.1",
"binary_name": "lwresd"
}
]
}