** Changed in: isc-dhcp (Debian)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes regularly (bionic)
To manage notifications
This bug was fixed in the package isc-dhcp - 4.3.5-3ubuntu9.1
---
isc-dhcp (4.3.5-3ubuntu9.1) cosmic-security; urgency=medium
* SECURITY UPDATE: DoS via change in bind behaviour (LP: #1781699)
- debian/patches/CVE-2019-6470.patch: use 0 instead of -1 to indicate
empty
This bug was fixed in the package isc-dhcp - 4.3.5-3ubuntu7.1
---
isc-dhcp (4.3.5-3ubuntu7.1) bionic-security; urgency=medium
* SECURITY UPDATE: DoS via change in bind behaviour (LP: #1781699)
- debian/patches/CVE-2019-6470.patch: use 0 instead of -1 to indicate
empty
Great, thanks for testing, I'll release these early next week!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes regularly (bionic)
To manage notifications about
Thanks for your work, Alex, Andreas and Marc! I can confirm that isc-
dhcp-server 4.3.5-3ubuntu7.1 has been running for two days while the
previous version crashed every few hours in my environment.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
I have tested the -server package on Bionic and I haven't had any
crashes yet. Typically in my environment it would have crashed after one
hour or two hours the latest.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
I have the packages in for testing, though repro may take some time to
occur organically. I also think it might be prudent to add a Restart
=on-failure directive to the systemd units regardless of whether the fix
for this issue is effective, so that future bugs don't take down users'
networks.
Packages for this issue are now available in the security team test ppa
here:
https://launchpad.net/~ubuntu-security-
proposed/+archive/ubuntu/ppa/+packages
Could someone please try them out and make sure they resolve the issue?
Thanks!
--
You received this bug notification because you are a
** Also affects: isc-dhcp (Ubuntu Eoan)
Importance: High
Status: Triaged
** Also affects: isc-dhcp (Ubuntu Bionic)
Importance: Undecided
Status: New
** Also affects: isc-dhcp (Ubuntu Cosmic)
Importance: Undecided
Status: New
** Also affects: isc-dhcp (Ubuntu Disco)
This has been assigned CVE-2019-6470
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-6470
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes
Thanks Alex, let's see if the patch changes after the issue is looked at
from a security perspective.
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes
Thanks Alex, let's see if the patch changes after the issue is looked at
from a security perspective.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes regularly
This looks like a possible use-after-free so likely has a security
impact (at a minimum it is a denial of service due to the crash,
especially if it can be triggered remotely) - I've reported it to ISC as
such who will hopefully assign a CVE and then we can fix it as a
security update. For future
It is really a shame that the fix of this bug in this basic network
infrastructure package has not made it into the distributions
(especially Ubuntu) after months. :(
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Hello:
This was corrected in ISC DHCP 4.4.1 under:
https://bugs.isc.org/Ticket/Display.html?id=46719#
4.3.* is EOL at this point.
** Bug watch added: bugs.isc.org/ #46719
https://bugs.isc.org/Ticket/Display.html?id=46719
--
You received this bug notification because you are a member of
Thank you, Sebastien. Unfortunately that link is behind a restrictive
access control, so if there indeed is a ISC DHCP bug tracker ID there,
no one has told us here. (ISC can for sure close my ticket as duplicate,
if they are already working on this.)
--
You received this bug notification
** Changed in: isc-dhcp (Ubuntu)
Importance: Undecided => High
** Changed in: isc-dhcp (Ubuntu)
Status: Confirmed => Triaged
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
** Changed in: isc-dhcp (Ubuntu)
Importance: Undecided => High
** Changed in: isc-dhcp (Ubuntu)
Status: Confirmed => Triaged
--
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1781699
There is no debug symbol here but if it's the same issue than the redhat report
then the error tracker bucket for the issue is
https://errors.ubuntu.com/problem/5c6b31248447aaecc5e91304bfd49f40be9eee7b
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
Thanks, I linked it to this bug here. Soon someone at isc will unblock
it so it's public.
** Bug watch added: bugs.isc.org/Public/ #48804
https://bugs.isc.org/Public/Ticket/Display.html?id=48804
** Also affects: dhcp via
https://bugs.isc.org/Public/Ticket/Display.html?id=48804
#12: I have, just now. RT #48804.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes regularly (bionic)
To manage notifications about this bug go to:
Has anybody filed an upstream bug about this at
https://www.isc.org/community/report-bug/ ?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes regularly (bionic)
To
@radek-zajic I'm not running the patch currently, but I only saw that
crash while running with the patch. If I rebuild using the patch again
I'll grab a stack trace (I've just replaced the machine running DHCP).
--
You received this bug notification because you are a member of Ubuntu
Bugs,
@pdf: would you please mind posting the different crash report? It can
be related to the dirty patch, or there can be another issue. Thanks.
ad restart parameter: that does not help in all cases, for example my
UEFI test machines booting via UEFI PXE+iPXE just hang when they do not
receive the
To those waiting for a fix: I'm using a workaround by setting systemd to
restart the service when it crashes. This works well for me:
$ cat /etc/systemd/system/isc-dhcp-server6.service.d/override.conf
[Service]
Restart=on-abort
RestartSec=1
Run systemctl daemon-reload after creating/changing the
Yes, the problem is certainly exacerbated by the service not having a
Restart parameter, but this needs some real attention. The quick-and-
dirty-patch does reduce the crashes, but results in a different crash
(albeit less frequently).
--
You received this bug notification because you are a
Still not fixed :-(
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes regularly (bionic)
To manage notifications about this bug go to:
Is there now a forecast when a fix will be available in Ubuntu?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes regularly (bionic)
To manage notifications about
The attachment "quick-and-dirty-patch" seems to be a patch. If it
isn't, please remove the "patch" flag from the attachment, remove the
"patch" tag, and if you are a member of the ~ubuntu-reviewers,
unsubscribe the team.
[This is an automated message performed by a Launchpad user owned by
Apparently the issue is caused by this commit
https://gitlab.isc.org/wpk/bind9/commit/65a483106e45704e19781bfe4f4634db4f77562e
which fixes a bug in the ISC heap library.
There seems to be a double-deletion of the released addresses in the
dhcpv6 code.
This quick-and-dirty patch helps (on ubuntu
Problem occurs on all our systems after dist upgrade to Ubuntu 18.04.1
LTS (isc-dhcp-server 4.3.5-3ubuntu7). :(
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes
** Changed in: isc-dhcp (Debian)
Status: Unknown => New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
DHCPv6 server crashes regularly (bionic)
To manage notifications about
The bug is not present in 16.10 (yakkety, isc-dhcp-
server=4.3.3-5ubuntu15.2). It is present in 17.10, 18.04 (isc-dhcp-
server=4.3.5-3ubuntu7) and 18.10 (isc-dhcp-server=4.3.5-3ubuntu9). Not
sure about 17.04.
** Bug watch added: Debian Bug tracker #896122
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: isc-dhcp (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781699
Title:
34 matches
Mail list logo