CVE-2012-5166: Specially crafted DNS data can cause a lockup in named

Debian Bug report logs - #690118
CVE-2012-5166: Specially crafted DNS data can cause a lockup in named

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Henri Salo <henri@nerv.fi>

To: submit@bugs.debian.org

Subject: CVE-2012-5166: Specially crafted DNS data can cause a lockup in named

Date: Wed, 10 Oct 2012 10:30:17 +0300

Package: bind9
Version: 1:9.7.3.dfsg-1~squeeze7
Severity: important
Tags: security

References:
https://www.isc.org/software/bind/advisories/cve-2012-5166
https://kb.isc.org/article/AA-00801

- Henri Salo

Message #10 received at 690118-done@bugs.debian.org (full text, mbox, reply):

From: Bernhard Schmidt <berni@birkenwald.de>

To: 690118-done@bugs.debian.org

Subject: Re: CVE-2012-5166: Specially crafted DNS data can cause a lockup in named

Date: Sat, 27 Oct 2012 23:06:11 +0200

Version: 1:9.7.3.dfsg-1~squeeze8

> References:
> https://www.isc.org/software/bind/advisories/cve-2012-5166
> https://kb.isc.org/article/AA-00801

This has been fixed for Squeeze in 1:9.7.3.dfsg-1~squeeze8

bind9 (1:9.7.3.dfsg-1~squeeze8) squeeze-security; urgency=high

   * Apply patch extracted from 9.7.6-P4 to fix CVE-2012-5166

 -- Florian Weimer <fw@deneb.enyo.de>  Sat, 20 Oct 2012 19:39:32 +0200 

The bug still affects Wheezy (#690142)

Bernhard

Send a report that this bug log contains spam.