BIND DNS 拒绝服务漏洞披露 CVE-2016-2776

[Tony8Finet]

Bind 9 named 程式 buffer.c 可由远端攻击引发断言失败(assertion failure), 致使服务终止。

各家套件系统已于上星期修补, 我试过 ubuntu 及 centos 皆可更新。

参考网页:

• CVE-2016-2776: Assertion Failure in buffer.c While Building Responses to a Specifically Constructed Request
• A tale of a DNS packet (CVE-2016-2776)