ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
{
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "host",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "libbind-dev",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "libbind9-90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "libdns100",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "libisc95",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "libisccc90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "libisccfg90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "liblwres90",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
},
{
"binary_name": "lwresd",
"binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm13"
}
]
}
{
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "host",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libbind-dev",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libbind-export-dev",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libbind9-140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libdns-export162",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libdns162",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libirs-export141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libirs141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisc-export160",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisc160",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisccc-export140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisccc140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisccfg-export140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "libisccfg140",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "liblwres141",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
},
{
"binary_name": "lwresd",
"binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}