Derek Straka 049b7db30c bind: CVE-2015-8704 and CVE-2015-8705 ...

CVE-2015-8704:
Allows remote authenticated users to cause a denial of service via a malformed Address Prefix List record

CVE-2015-8705:
When debug logging is enabled, allows remote attackers to cause a denial of service or have possibly unspecified impact via OPT data or ECS option

[YOCTO 8966]

References:
https://kb.isc.org/article/AA-01346/0/BIND-9.10.3-P3-Release-Notes.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705

(From OE-Core rev: 78ceabeb2df55194f16324d21ba97e81121f996b)

Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2016-01-30 12:13:09 +00:00

..

bind

bind: CVE-2015-8704 and CVE-2015-8705

2016-01-30 12:13:09 +00:00

bind_9.10.2-P4.bb

bind: CVE-2015-8704 and CVE-2015-8705

2016-01-30 12:13:09 +00:00