advisories/16324.adv

type: security
subject: Updated bind package fixes security vulnerability
CVE:
 - CVE-2015-4620
src:
  4:
   core:
     - bind-9.9.7.P1-1.mga4
  5:
   core:
     - bind-9.10.2.P2-1.mga5
description: |
  A recursive resolver that is performing DNSSEC validation can be
  deliberately terminated by any attacker who can cause a query to be
  performed against a maliciously constructed zone.  This will result in a
  denial of service to clients who rely on that resolver (CVE-2015-4620).

  Note that DNSSEC validation is not enabled by default.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=16324
 - https://kb.isc.org/article/AA-01267
 - https://kb.isc.org/article/AA-01270
 - https://kb.isc.org/article/AA-01269
1	type: security
2	subject: Updated bind package fixes security vulnerability
3	CVE:
4	- CVE-2015-4620
5	src:
6	4:
7	core:
8	- bind-9.9.7.P1-1.mga4
9	5:
10	core:
11	- bind-9.10.2.P2-1.mga5
12	description: \|
13	A recursive resolver that is performing DNSSEC validation can be
14	deliberately terminated by any attacker who can cause a query to be
15	performed against a maliciously constructed zone. This will result in a
16	denial of service to clients who rely on that resolver (CVE-2015-4620).
17
18	Note that DNSSEC validation is not enabled by default.
19	references:
20	- https://bugs.mageia.org/show_bug.cgi?id=16324
21	- https://kb.isc.org/article/AA-01267
22	- https://kb.isc.org/article/AA-01270
23	- https://kb.isc.org/article/AA-01269