SecurityTracker.com
Keep Track of the Latest Vulnerabilities
with SecurityTracker!
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


Try our Premium Alert Service
 
Sign Up
Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
Instant Alerts
Buy our Premium Vulnerability Notification Service to receive customized, instant alerts
Affiliates
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
Partners
Become a Partner and License Our Database or Notification Service





Category:   Application (Generic)  >   BIND Vendors:   ISC (Internet Software Consortium)
BIND Lightweight Resolution Bug in Processing Long Queries Lets Remote Users Cause the Target Service to Crash
SecurityTracker Alert ID:  1036360
SecurityTracker URL:  http://securitytracker.com/id/1036360
CVE Reference:   CVE-2016-2775   (Links to External Site)
Updated:  Sep 8 2016
Original Entry Date:  Jul 19 2016
Impact:   Denial of service via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 9.0.x - 9.9.9-P1, 9.10.0 - 9.10.4-P1, 9.11.0a3 - 9.11.0b1
Description:   A vulnerability was reported in BIND. A remote user can cause the target service to crash.

A remote user can send a specially crafted request with a query name and a search list entry that exceeds the maximum allowable length to cause the target BIND server to crash.

Systems using the lightweight resolution protocol via either the 'lwresd' utility or via named using the "lwres" statement in 'named.conf' are affected.

Impact:   A remote user can cause the target service to crash.
Solution:   The vendor has issued a fix (9.9.9-P2, 9.10.4-P2, 9.11.0b3, 9.11.0).

The vendor's advisory is available at:

https://kb.isc.org/article/AA-01393/74/CVE-2016-2775

Vendor URL:  kb.isc.org/article/AA-01393/74/CVE-2016-2775 (Links to External Site)
Cause:   Boundary error
Underlying OS:  Linux (Any), UNIX (Any)

Message History:   This archive entry has one or more follow-up message(s) listed below.
Nov 4 2016 (HP Issues Fix) BIND Lightweight Resolution Bug in Processing Long Queries Lets Remote Users Cause the Target Service to Crash
HP has issued a fix for HP-UX 11.31.
Nov 18 2016 (IBM Issues Fix for IBM AIX) BIND Lightweight Resolution Bug in Processing Long Queries Lets Remote Users Cause the Target Service to Crash
IBM has issued a fix for IBM AIX 5.3, 6.1, 7.1, and 7.2.
Aug 24 2017 (Red Hat Issues Fix) BIND Lightweight Resolution Bug in Processing Long Queries Lets Remote Users Cause the Target Service to Crash
Red Hat has issued a fix for Red Hat Enterprise Linux 7.2 and 7.3.



 Source Message Contents

Subject:  [oss-security] ISC security issue CVE-2016-2775 (potential denial-of-service attack against lwres functionality in BIND)

Earlier today ISC disclosed a vulnerability affecting BIND (specifically
affecting lightweight resolution functionality in BIND, NOT normal DNS
resolution.  The bug affects the lwresd program or named if is configured
to do lightweight resolution using the "lwres" configuration statement.)

The defect was publicly disclosed as CVE-2016-2775 and the official
vulnerability disclosure is here:

  https://kb.isc.org/article/AA-01393/74/CVE-2016-2775

Ordinarily we try to give advance notice to packagers when we are
preparing new releases of BIND.  Unfortunately our timetable for this
incident changed in mid-course when the reporting party informed us
that reproduction code was already available in a public bug repository.

We apologize for the inconvenience caused by the acceleration of our
disclosure timetable.

New releases of BIND are available which fix the lwres issue
(CVE-2016-2775) and include fixes for a few regressions which
had been introduced in recent versions.  You can find them in
the usual place on our site:

  https://www.isc.org/downloads

A standalone patch diff addressing only CVE-2016-2775 can be made
available upon request to any parties who want only the lwres CVE
fix and not the other regression fixes.  Contact security-officer@isc.org
if you wish to request it.

Michael McNally
(for ISC Security Officer)
 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2018, SecurityGlobal.net LLC