Re: bind9 CVE-2017-3137

From	Adrian Minta <adrian.minta@gmail.com>
Newsgroups	linux.debian.security
Subject	Re: bind9 CVE-2017-3137
Date	2017-05-12 09:10 +0200
Message-ID	<tGcS6-TT-3@gated-at.bofh.it> (permalink)
References	<tyjH4-ye-9@gated-at.bofh.it> <tFWDF-6V6-35@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi

On 05/11/2017 04:41 PM, Salvatore Bonaccorso wrote:
> Hi
>
> If possible test the test packages at
> https://people.debian.org/~carnil/tmp/bind9/
>
> Regards,
> Salvatore
I've rebuild the bind9 packages with your patch and installed them. They 
seems to work without any issues so far, at least on amd64.
I don't know how to test if the CVE-2017-3137 is fixed, other than let 
it run am see if it crashes again with assertion failure.


If anyone have a POC please feel free to share !

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

bind9 CVE-2017-3137 Adrian Minta <adrian.minta@gmail.com> - 2017-04-20 14:50 +0200
  Re: bind9 CVE-2017-3137 Salvatore Bonaccorso <carnil@debian.org> - 2017-05-11 15:50 +0200
    Re: bind9 CVE-2017-3137 Adrian Minta <adrian.minta@gmail.com> - 2017-05-12 09:10 +0200

csiph-web