A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.
{ "binaries": [ { "binary_name": "bind9", "binary_version": "1:9.18.28-0ubuntu0.20.04.1" }, { "binary_name": "bind9-dnsutils", "binary_version": "1:9.18.28-0ubuntu0.20.04.1" }, { "binary_name": "bind9-host", "binary_version": "1:9.18.28-0ubuntu0.20.04.1" }, { "binary_name": "bind9-libs", "binary_version": "1:9.18.28-0ubuntu0.20.04.1" }, { "binary_name": "bind9-utils", "binary_version": "1:9.18.28-0ubuntu0.20.04.1" }, { "binary_name": "bind9utils", "binary_version": "1:9.18.28-0ubuntu0.20.04.1" }, { "binary_name": "dnsutils", "binary_version": "1:9.18.28-0ubuntu0.20.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "bind9", "binary_version": "1:9.18.28-0ubuntu0.22.04.1" }, { "binary_name": "bind9-dev", "binary_version": "1:9.18.28-0ubuntu0.22.04.1" }, { "binary_name": "bind9-dnsutils", "binary_version": "1:9.18.28-0ubuntu0.22.04.1" }, { "binary_name": "bind9-host", "binary_version": "1:9.18.28-0ubuntu0.22.04.1" }, { "binary_name": "bind9-libs", "binary_version": "1:9.18.28-0ubuntu0.22.04.1" }, { "binary_name": "bind9-utils", "binary_version": "1:9.18.28-0ubuntu0.22.04.1" }, { "binary_name": "bind9utils", "binary_version": "1:9.18.28-0ubuntu0.22.04.1" }, { "binary_name": "dnsutils", "binary_version": "1:9.18.28-0ubuntu0.22.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libbind-dev", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libbind-export-dev", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libbind9-161", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libdns-export1110", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libdns1110", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libirs-export161", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libirs161", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libisc-export1105", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libisc1105", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libisccc-export161", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libisccc161", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libisccfg-export163", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "libisccfg163", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" }, { "binary_name": "liblwres161", "binary_version": "1:9.11.19+dfsg-2.1ubuntu3" } ] }
{ "binaries": [ { "binary_name": "bind9", "binary_version": "1:9.18.28-0ubuntu0.24.04.1" }, { "binary_name": "bind9-dev", "binary_version": "1:9.18.28-0ubuntu0.24.04.1" }, { "binary_name": "bind9-dnsutils", "binary_version": "1:9.18.28-0ubuntu0.24.04.1" }, { "binary_name": "bind9-host", "binary_version": "1:9.18.28-0ubuntu0.24.04.1" }, { "binary_name": "bind9-libs", "binary_version": "1:9.18.28-0ubuntu0.24.04.1" }, { "binary_name": "bind9-utils", "binary_version": "1:9.18.28-0ubuntu0.24.04.1" }, { "binary_name": "bind9utils", "binary_version": "1:9.18.28-0ubuntu0.24.04.1" }, { "binary_name": "dnsutils", "binary_version": "1:9.18.28-0ubuntu0.24.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "isc-dhcp-client", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-client-ddns", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-common", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-dev", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-keama", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-relay", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-server", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-server-ldap", "binary_version": "4.4.3-P1-4ubuntu2" } ] }
{ "binaries": [ { "binary_name": "isc-dhcp-client", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-client-ddns", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-common", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-dev", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-keama", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-relay", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-server", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-server-ldap", "binary_version": "4.4.3-P1-4ubuntu2" } ] }
{ "binaries": [ { "binary_name": "isc-dhcp-client", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-client-ddns", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-common", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-dev", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-keama", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-relay", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-server", "binary_version": "4.4.3-P1-4ubuntu2" }, { "binary_name": "isc-dhcp-server-ldap", "binary_version": "4.4.3-P1-4ubuntu2" } ] }
{ "binaries": [ { "binary_name": "isc-dhcp-client", "binary_version": "4.3.5-3ubuntu7.4" }, { "binary_name": "isc-dhcp-client-ddns", "binary_version": "4.3.5-3ubuntu7.4" }, { "binary_name": "isc-dhcp-common", "binary_version": "4.3.5-3ubuntu7.4" }, { "binary_name": "isc-dhcp-dev", "binary_version": "4.3.5-3ubuntu7.4" }, { "binary_name": "isc-dhcp-relay", "binary_version": "4.3.5-3ubuntu7.4" }, { "binary_name": "isc-dhcp-server", "binary_version": "4.3.5-3ubuntu7.4" }, { "binary_name": "isc-dhcp-server-ldap", "binary_version": "4.3.5-3ubuntu7.4" } ] }
{ "binaries": [ { "binary_name": "libbind-dev", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libbind-export-dev", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libbind9-161", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libdns-export1109", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libdns1109", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libirs-export161", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libirs161", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libisc-export1105", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libisc1105", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libisccc-export161", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libisccc161", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libisccfg-export163", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "libisccfg163", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" }, { "binary_name": "liblwres161", "binary_version": "1:9.11.16+dfsg-3~ubuntu1" } ] }