USN-3893-1: Bind vulnerabilities
22 February 2019
Several security issues were fixed in Bind.
- bind9 - Internet Domain Name Server
Toshifumi Sakaguchi discovered that Bind incorrectly handled memory. A
remote attacker could possibly use this issue to cause Bind to consume
resources, leading to a denial of service. This issue only affected Ubuntu
18.04 LTS and Ubuntu 18.10. (CVE-2018-5744)
It was discovered that Bind incorrectly handled certain trust anchors when
used with the "managed-keys" feature. A remote attacker could possibly use
this issue to cause Bind to crash, resulting in a denial of service.
It was discovered that Bind incorrectly handled certain controls for zone
transfers, contrary to expectations. (CVE-2019-6465)
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.
- USN-3893-2: bind9