Bug 171631

Summary: Bind security problem: A Specially Crafted Resource Record Could Cause named to Terminate
Product: Ports & Packages Reporter: Alexey Kouznetsov <alexey>
Component: Individual Port(s)Assignee: Doug Barton <dougb>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Latest   
Hardware: Any   
OS: Any   

Description Alexey Kouznetsov 2012-09-14 07:30:15 UTC 
http://www.isc.org/software/bind/advisories/cve-2012-4244

-cut-
A nameserver can be caused to exit with a REQUIRE exception if it can be induced to load a specially crafted resource record.

If a record with RDATA in excess of 65535 bytes is loaded into a nameserver, a subsequent query for that record will cause named to exit with an assertion failure.

Please Note: Versions of BIND 9.4 and 9.5 are also affected, but these branches are beyond their "end of life" (EOL) and no longer receive testing or security fixes from ISC.

This vulnerability can be exploited remotely against recursive servers by inducing them to query for records provided by an authoritative server. It affects authoritative servers if a zone containing this type of resource record is loaded from file or provided via zone transfer.
-cut-

Fix: 

There are new releases from ISC with fix of the bug
BIND 9 version 9.7.7, 9.7.6-P3
BIND 9 version 9.6-ESV-R8, 9.6-ESV-R7-P3
BIND 9 version 9.8.4, 9.8.3-P3
BIND 9 version 9.9.2, 9.9.1-P3

ports dns/bind9* have top be updated to new release. Same as base system where we have 9.x release too.
Comment 1 Doug Barton freebsd_committer freebsd_triage 2012-09-18 22:05:14 UTC 
State Changed
From-To: open->closed


Got it, thanks.
Comment 2 Doug Barton freebsd_committer freebsd_triage 2012-09-18 22:05:14 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->dougb


Got it, thanks.