| Package | Affected versions | Patched versions |
|---|---|---|
| bind | = 9.10.3= 9.9.8≥ 9.0.0, < 9.9.8≥ 9.10.0, < 9.10.3 | 9.9.89.10.3 |
| linux enterprise debuginfo | = 11 | |
| manager | = 2.1 | |
| manager proxy | = 2.1 | |
| openstack cloud | = 5 |
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free