Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0174-1

Опубликовано: 19 янв. 2016
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

  • CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
bind-libs-9.9.6P1-35.1
bind-libs-32bit-9.9.6P1-35.1
bind-utils-9.9.6P1-35.1
SUSE Linux Enterprise Server 12 SP1
bind-9.9.6P1-35.1
bind-chrootenv-9.9.6P1-35.1
bind-doc-9.9.6P1-35.1
bind-libs-9.9.6P1-35.1
bind-libs-32bit-9.9.6P1-35.1
bind-utils-9.9.6P1-35.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
bind-9.9.6P1-35.1
bind-chrootenv-9.9.6P1-35.1
bind-doc-9.9.6P1-35.1
bind-libs-9.9.6P1-35.1
bind-libs-32bit-9.9.6P1-35.1
bind-utils-9.9.6P1-35.1
SUSE Linux Enterprise Software Development Kit 12 SP1
bind-devel-9.9.6P1-35.1

Ссылки

Описание

apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:bind-libs-32bit-9.9.6P1-35.1
SUSE Linux Enterprise Desktop 12 SP1:bind-libs-9.9.6P1-35.1
SUSE Linux Enterprise Desktop 12 SP1:bind-utils-9.9.6P1-35.1
SUSE Linux Enterprise Server 12 SP1:bind-9.9.6P1-35.1
Ссылки
Уязвимость SUSE-SU-2016:0174-1