buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
{
"binaries": [
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "bind9"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "bind9-host"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "bind9utils"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "dnsutils"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "host"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "libbind-dev"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "libbind9-90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "libdns100"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "libisc95"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "libisccc90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "libisccfg90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "liblwres90"
},
{
"binary_version": "1:9.9.5.dfsg-3ubuntu0.5",
"binary_name": "lwresd"
}
],
"availability": "No subscription required"
}