BIND 10 #3114: Too large number crashes BIND 10 and stops it from being restarted

BIND 10 Development do-not-reply at isc.org
Fri Aug 30 10:31:41 UTC 2013


#3114: Too large number crashes BIND 10 and stops it from being restarted
--------------------------------+-----------------------------------------
            Reporter:  cas      |                        Owner:
                Type:  defect   |                       Status:  new
            Priority:  high     |                    Milestone:  New Tasks
           Component:  cmd-ctl  |                   Resolution:
            Keywords:           |                 CVSS Scoring:
           Sensitive:  0        |              Defect Severity:  N/A
         Sub-Project:  Core     |  Feature Depending on Ticket:
Estimated Difficulty:  0        |          Add Hours to Ticket:  0
         Total Hours:  0        |                    Internal?:  0
--------------------------------+-----------------------------------------

Comment (by vorner):

 I'm not saying this should not be fixed, or something. This, surely, is a
 bug and it should be fixed. I was just saying we should not be keeping it
 secret, because an attacker doesn't gain anything knowing that there's
 such a bug. On the other hand, a user stumbling on this by accident can
 find some background and help here.

 The comparison with „Init shutdown“ was meant as illustrating which level
 of permissions you need. If an attacker can abuse this bug, he can also
 use „Init shutdown“ (both willingly).

-- 
Ticket URL: <http://bind10.isc.org/ticket/3114#comment:5>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list