{"id":"MGASA-2015-0341","summary":"Updated bind packages fix security vulnerabilities","details":"Updated bind packages fix security vulnerability:\n\nParsing a malformed DNSSEC key can cause a validating resolver to exit due to\na failed assertion in buffer.c.  It is possible for a remote attacker to\ndeliberately trigger this condition, for example by using a query which\nrequires a response from a zone containing a deliberately malformed key\n(CVE-2015-5722).\n\nAn incorrect boundary check in openpgpkey_61.c can cause named to terminate\ndue to a REQUIRE assertion failure.  This defect can be deliberately exploited\nby an attacker who can provide a maliciously constructed response in answer to\na query (CVE-2015-5986).\n","modified":"2026-04-16T06:25:02.430070531Z","published":"2015-09-08T07:20:40Z","upstream":["CVE-2015-5722","CVE-2015-5986"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2015-0341.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=16695"},{"type":"WEB","url":"https://kb.isc.org/article/AA-01287"},{"type":"WEB","url":"https://kb.isc.org/article/AA-01291"},{"type":"WEB","url":"https://kb.isc.org/article/AA-01300"},{"type":"WEB","url":"https://kb.isc.org/article/AA-01301"}],"affected":[{"package":{"name":"bind","ecosystem":"Mageia:4","purl":"pkg:rpm/mageia/bind?arch=source&distro=mageia-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9.7.P3-1.mga4"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2015-0341.json"}},{"package":{"name":"bind","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/bind?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.2.P4-1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2015-0341.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}