A DNS server BIND 9.14.3, 9.11.8, and 9.12.4-P2 stable branch corrective updates, as well as the experimental branch 9.15.1 currently in development. At the same time, it has been announced that there will be no further support for the 9.12 branch, and updates for it will no longer be released.
The updates are notable for fixing (), which allows denial of service (termination of the process with the assertion REQUIRE). The problem is caused by a race condition that occurs when processing a very large number of specially crafted incoming packets that fall under the blocking filter. To exploit the vulnerability, an attacker must send a large number of requests to the victim's resolver, leading it to query the attacker's DNS server that returns incorrect responses.
Forrás: opennet.ru
