[security-alerts] FW: [SA25070] ISC BIND "query_addsoa" Denial of Service

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
> 
> TITLE:
> ISC BIND "query_addsoa" Denial of Service
> 
> SECUNIA ADVISORY ID:
> SA25070
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/25070/
> 
> CRITICAL:
> Moderately critical
> 
> IMPACT:
> DoS
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> ISC BIND 9.4.x
> http://secunia.com/product/14101/
> 
> DESCRIPTION:
> A vulnerability has been reported in BIND, which can be exploited by
> malicious people to cause a DoS (Denial of Service).
> 
> The vulnerability is caused due to an error when invoking the
> "query_addsoa()" function. This can be exploited to cause the
> nameserver to exit by sending a specially crafted sequence of
> queries.
> 
> Successful exploitation requires that "recursion" is enabled.
> 
> The vulnerability is reported in BIND version 9.4.0, and BIND
> versions 9.5.0a1, 9.5.0a2, and 9.5.0a3.
> 
> SOLUTION:
> Update to BIND 9.4.1.
> ftp://ftp.isc.org/isc/bind9/9.4.1/bind-9.4.1.tar.gz
> 
> Windows 2000, Windows XP, and Window 2003 binary kits:
> ftp://ftp.isc.org/isc/bind9/9.4.1/BIND9.4.1.zip
> ftp://ftp.isc.org/isc/bind9/9.4.1/BIND9.4.1.debug.zip
> 
> PROVIDED AND/OR DISCOVERED BY:
> Reported by the vendor.
> 
> ORIGINAL ADVISORY:
> http://www.isc.org/sw/bind/bind-security.php
>