ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
{
"binaries": [
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "bind9"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "bind9-host"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "bind9utils"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "dnsutils"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "host"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "libbind-dev"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "libbind9-90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "libdns100"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "libisc95"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "libisccc90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "libisccfg90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "liblwres90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13",
"binary_name": "lwresd"
}
]
}
{
"binaries": [
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "bind9"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "bind9-host"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "bind9utils"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "dnsutils"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "host"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libbind-dev"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libbind-export-dev"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libbind9-140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libdns-export162"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libdns162"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libirs-export141"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libirs141"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libisc-export160"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libisc160"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libisccc-export140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libisccc140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libisccfg-export140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "libisccfg140"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "liblwres141"
},
{
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
"binary_name": "lwresd"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}