Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-23 Thread David Coulthart
On Feb 22, 2011, at 3:55 PM, Larissa Shapiro wrote: Description and Impact: When an authoritative server processes a successful IXFR transfer or a dynamic update, there is a small window of time during which the IXFR/update coupled with a query may cause a deadlock to occur. This deadlock

Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Larissa Shapiro
Internet Systems Consortium Security Advisory Title: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate (http://www.isc.org/software/bind/advisories/cve-2011-0414) CVE-2011-0414 VU#559980 CVSS: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C) for more

Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Dennis Clarke
Sorry for the top post but there is no data yet at http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0414. I'll assume that is coming along. I have 9.7.3 ready for relase on Solaris 8 and 9 and 10 however I wanted to refer to the various security info sites. Do you know if the folks at

Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Larissa Shapiro
Hi Dennis, Thank you for getting 9.7.3 out on Solaris, that is a huge help in getting this important update out there. I do not know the answer to your question about the NIST CVE listings, but I will inquire. Our CVE numbers actually come to us from Carnegie-Mellon CERT, not NIST, but NIST does

Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Dennis Clarke
Hi Dennis, Thank you for getting 9.7.3 out on Solaris, that is a huge help in getting this important update out there. I have been running 9.7.3 for a few days now on all my production DNS servers ( a bunch ) and a few in client sites in Europe. All seems to be running very well and the

RE: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Takuya Matsumoto
To: bind-users@lists.isc.org Subject: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate Internet Systems Consortium Security Advisory Title: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate (http