Re: bind9 CVE-2017-3137

To: debian-security@lists.debian.org
Subject: Re: bind9 CVE-2017-3137
From: Adrian Minta <adrian.minta@gmail.com>
Date: Fri, 12 May 2017 10:04:22 +0300
Message-id: <[🔎] 63076e10-2477-9df2-ee1f-ca5b7fc254e1@gmail.com>
In-reply-to: <[🔎] 20170511134113.GA4597@lorien.valinor.li>
References: <c0e40a34-077e-e934-f08a-8eccc376b0c6@gmail.com> <[🔎] 20170511134113.GA4597@lorien.valinor.li>

Hi

On 05/11/2017 04:41 PM, Salvatore Bonaccorso wrote:

Hi

If possible test the test packages at
https://people.debian.org/~carnil/tmp/bind9/

Regards,
Salvatore

I've rebuild the bind9 packages with your patch and installed them. Theyseems to work without any issues so far, at least on amd64.I don't know how to test if the CVE-2017-3137 is fixed, other than letit run am see if it crashes again with assertion failure.



If anyone have a POC please feel free to share !

Reply to:

References:
- Re: bind9 CVE-2017-3137
  - From: Salvatore Bonaccorso <carnil@debian.org>

Prev by Date: Re: bind9 CVE-2017-3137
Next by Date: How To Incident Response
Previous by thread: Re: bind9 CVE-2017-3137
Next by thread: How To Incident Response
Index(es):
- Date
- Thread