Date: Sun, 13 Jan 2013 11:26:17 +0100 From: Florian Weimer <fw@...eb.enyo.de> To: oss-security@...ts.openwall.com Subject: DoS vulnerability in the BIND resolver (and potentially others) Scott Brynen described a behavioral change in some of the UltraDNS authorative name servers: <https://lists.dns-oarc.net/pipermail/dns-operations/2013-January/009501.html> Mark Andrews of ISC confirmed that this triggers a denial of service condition in the BIND recursive resolver: <https://lists.dns-oarc.net/pipermail/dns-operations/2013-January/009506.html> I think he is right, but this obviously has to be fixed in the resolver. Can this be assigned a CVE?
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.