Isc bind Denial of Service Vulnerability (CVE-2015-8461)

Isc bind Denial of Service Vulnerability (CVE-2015-8461)
Isc bind Denial of Service Vulnerability (CVE-2015-8461)

Release date:
Updated on:

Affected Systems:

Isc bind 9. x-9.9.8-P2
Isc bind 9.10.x-9.10.3-P2

Description:

CVE (CAN) ID: CVE-2015-8461

BIND is a widely used DNS protocol.

In isc bind 9. x-9.9.8-P2, 9.10.x-9.10.3-P2, named resolver. c has a race condition security vulnerability. Remote attackers can cause DoS (INSIST assertion failure and program exit ).

<* Source: Michael McNally
*>

Suggestion:

Vendor patch:

ISC
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.isc.org/downloads

Https://kb.isc.org/article/AA-01319

Use BIND to configure the DNS server

BIND + DLZ + MySQL smart DNS implementation of forward and reverse resolution

Domain Name Service BIND construction and application configuration

Ubuntu BIND9 wildcard domain name resolution Configuration

Install BIND9.6 in CentOS 5.2

Install the Bind DNS server in CentOS 6.4

This article permanently updates the link address: