Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

Larissa Shapiro larissas at isc.org
Wed Feb 23 04:53:09 UTC 2011


Hi Dennis,

Thank you for getting 9.7.3 out on Solaris, that is a huge help in
getting this important update out there.

I do not know the answer to your question about the NIST CVE listings,
but I will inquire. Our CVE numbers actually come to us from
Carnegie-Mellon CERT, not NIST, but NIST does keep an up to date list
generally.

I'll also post here if/when I find out more.

Best,

Larissa

On 2/22/11 8:26 PM, Dennis Clarke wrote:
> Sorry for the top post but there is no data yet at
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0414. I'll assume
> that is coming along. I have 9.7.3 ready for relase on Solaris 8 and 9 and
> 10 however I wanted to refer to the various security info sites.
>
> Do you know if the folks at nist are doing an update ?
>




More information about the bind-users mailing list