ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "host",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "libbind-dev",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "libbind9-90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "libdns100",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "libisc95",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "libisccc90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "libisccfg90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "liblwres90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
},
{
"binary_name": "lwresd",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm9"
}
]
}
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "host",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libbind-dev",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libbind-export-dev",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libbind9-140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libdns-export162",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libdns162",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libirs-export141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libirs141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisc-export160",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisc160",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisccc-export140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisccc140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisccfg-export140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisccfg140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "liblwres141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "lwresd",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
}
]
}