ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability

Bugtraq ID:	46491
Class:	Race Condition Error
CVE:	CVE-2011-0414
Remote:	Yes
Local:	No
Published:	Feb 22 2011 12:00AM
Updated:	Apr 08 2011 05:55AM
Credit:	Neustar and JPRS
Vulnerable:	Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Pardus Linux 2011 0 Pardus Linux 2009 0 ISC BIND 9.7.1-P2 ISC BIND 9.7.1 P1 ISC BIND 9.7.1 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability

ISC BIND is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected service to stop processing requests, denying service to legitimate users.

BIND versions 9.7.1 and 9.7.2 are vulnerable.

ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability

An attacker can use readily available network utilities.

ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu host_9.7.1.dfsg.P2-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/b/bind9/host_9.7.1.dfs g.P2-2ubuntu0.2_all.deb


• Ubuntu bind9-doc_9.7.1.dfsg.P2-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.7.1.df sg.P2-2ubuntu0.2_all.deb


• Ubuntu bind9-host_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-host_9.7.1.d fsg.P2-2ubuntu0.2_amd64.deb


• Ubuntu bind9utils_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9utils_9.7.1.d fsg.P2-2ubuntu0.2_amd64.deb


• Ubuntu bind9_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.7.1.dfsg.P 2-2ubuntu0.2_amd64.deb


• Ubuntu libisc60_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisc60_9.7.1.dfs g.P2-2ubuntu0.2_amd64.deb


• Ubuntu libdns66_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libdns66_9.7.1.dfs g.P2-2ubuntu0.2_amd64.deb


• Ubuntu lwresd_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/b/bind9/lwresd_9.7.1.d fsg.P2-2ubuntu0.2_amd64.deb


• Ubuntu dnsutils_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/dnsutils_9.7.1.dfs g.P2-2ubuntu0.2_amd64.deb


• Ubuntu libisccfg60_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisccfg60_9.7.1. dfsg.P2-2ubuntu0.2_amd64.deb


• Ubuntu libisccc60_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisccc60_9.7.1.d fsg.P2-2ubuntu0.2_amd64.deb


• Ubuntu libbind-dev_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libbind-dev_9.7.1. dfsg.P2-2ubuntu0.2_amd64.deb


• Ubuntu liblwres60_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/liblwres60_9.7.1.d fsg.P2-2ubuntu0.2_amd64.deb


• Ubuntu libbind9-60_9.7.1.dfsg.P2-2ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libbind9-60_9.7.1. dfsg.P2-2ubuntu0.2_amd64.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu bind9utils_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/bind9utils_9.7.1.dfsg.P2-2ub untu0.2_powerpc.deb


• Ubuntu bind9-host_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/bind9-host_9.7.1.dfsg.P2-2ub untu0.2_powerpc.deb


• Ubuntu bind9_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/bind9_9.7.1.dfsg.P2-2ubuntu0 .2_powerpc.deb


• Ubuntu liblwres60_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/liblwres60_9.7.1.dfsg.P2-2ub untu0.2_powerpc.deb


• Ubuntu libbind-dev_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libbind-dev_9.7.1.dfsg.P2-2u buntu0.2_powerpc.deb


• Ubuntu lwresd_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/b/bind9/lwresd_9.7.1.dfsg.P2-2ub untu0.2_powerpc.deb


• Ubuntu libisc60_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libisc60_9.7.1.dfsg.P2-2ubun tu0.2_powerpc.deb


• Ubuntu host_9.7.1.dfsg.P2-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/b/bind9/host_9.7.1.dfs g.P2-2ubuntu0.2_all.deb


• Ubuntu bind9-doc_9.7.1.dfsg.P2-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.7.1.df sg.P2-2ubuntu0.2_all.deb


• Ubuntu dnsutils_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/dnsutils_9.7.1.dfsg.P2-2ubun tu0.2_powerpc.deb


• Ubuntu libbind9-60_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libbind9-60_9.7.1.dfsg.P2-2u buntu0.2_powerpc.deb


• Ubuntu libisccc60_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libisccc60_9.7.1.dfsg.P2-2ub untu0.2_powerpc.deb


• Ubuntu libisccfg60_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libisccfg60_9.7.1.dfsg.P2-2u buntu0.2_powerpc.deb


• Ubuntu libdns66_9.7.1.dfsg.P2-2ubuntu0.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libdns66_9.7.1.dfsg.P2-2ubun tu0.2_powerpc.deb

Ubuntu Ubuntu Linux 10.10 ARM

• Ubuntu bind9utils_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/bind9utils_9.7.1.dfsg.P2-2ub untu0.2_armel.deb


• Ubuntu libbind-dev_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libbind-dev_9.7.1.dfsg.P2-2u buntu0.2_armel.deb


• Ubuntu libbind9-60_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libbind9-60_9.7.1.dfsg.P2-2u buntu0.2_armel.deb


• Ubuntu host_9.7.1.dfsg.P2-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/b/bind9/host_9.7.1.dfs g.P2-2ubuntu0.2_all.deb


• Ubuntu dnsutils_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/dnsutils_9.7.1.dfsg.P2-2ubun tu0.2_armel.deb


• Ubuntu libisccc60_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libisccc60_9.7.1.dfsg.P2-2ub untu0.2_armel.deb


• Ubuntu liblwres60_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/liblwres60_9.7.1.dfsg.P2-2ub untu0.2_armel.deb


• Ubuntu lwresd_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/universe/b/bind9/lwresd_9.7.1.dfsg.P2-2ub untu0.2_armel.deb


• Ubuntu bind9-doc_9.7.1.dfsg.P2-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.7.1.df sg.P2-2ubuntu0.2_all.deb


• Ubuntu libdns66_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libdns66_9.7.1.dfsg.P2-2ubun tu0.2_armel.deb


• Ubuntu bind9-host_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/bind9-host_9.7.1.dfsg.P2-2ub untu0.2_armel.deb


• Ubuntu libisc60_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libisc60_9.7.1.dfsg.P2-2ubun tu0.2_armel.deb


• Ubuntu bind9_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/bind9_9.7.1.dfsg.P2-2ubuntu0 .2_armel.deb


• Ubuntu libisccfg60_9.7.1.dfsg.P2-2ubuntu0.2_armel.deb
  http://ports.ubuntu.com/pool/main/b/bind9/libisccfg60_9.7.1.dfsg.P2-2u buntu0.2_armel.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu bind9utils_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9utils_9.7.1.d fsg.P2-2ubuntu0.2_i386.deb


• Ubuntu libbind-dev_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libbind-dev_9.7.1. dfsg.P2-2ubuntu0.2_i386.deb


• Ubuntu dnsutils_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/dnsutils_9.7.1.dfs g.P2-2ubuntu0.2_i386.deb


• Ubuntu libdns66_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libdns66_9.7.1.dfs g.P2-2ubuntu0.2_i386.deb


• Ubuntu libisccfg60_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisccfg60_9.7.1. dfsg.P2-2ubuntu0.2_i386.deb


• Ubuntu bind9_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.7.1.dfsg.P 2-2ubuntu0.2_i386.deb


• Ubuntu libisc60_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisc60_9.7.1.dfs g.P2-2ubuntu0.2_i386.deb


• Ubuntu libisccc60_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisccc60_9.7.1.d fsg.P2-2ubuntu0.2_i386.deb


• Ubuntu bind9-host_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-host_9.7.1.d fsg.P2-2ubuntu0.2_i386.deb


• Ubuntu libbind9-60_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libbind9-60_9.7.1. dfsg.P2-2ubuntu0.2_i386.deb


• Ubuntu host_9.7.1.dfsg.P2-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/b/bind9/host_9.7.1.dfs g.P2-2ubuntu0.2_all.deb


• Ubuntu lwresd_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/b/bind9/lwresd_9.7.1.d fsg.P2-2ubuntu0.2_i386.deb


• Ubuntu bind9-doc_9.7.1.dfsg.P2-2ubuntu0.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.7.1.df sg.P2-2ubuntu0.2_all.deb


• Ubuntu liblwres60_9.7.1.dfsg.P2-2ubuntu0.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/b/bind9/liblwres60_9.7.1.d fsg.P2-2ubuntu0.2_i386.deb

ISC BIND 9 IXFR Transfer/DDNS Update Remote Denial of Service Vulnerability

References:

• ISC BIND Homepage (ISC)
  
• Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate (ISC)
  
• Vulnerability Note VU#559980 ISC Bind 9 IXFR or DDNS update combined with high q (US-CERT)