https://bugzilla.novell.com/show_bug.cgi?id=823664 https://bugzilla.novell.com/show_bug.cgi?id=823664#c Alexander Bergmann changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |abergmann@suse.com Summary|CVE-2013-3919: A recursive |VUL-0: bind: CVE-2013-3919: |resolver can be crashed by |A recursive resolver can be |a query for a malformed |crashed by a query for a |zone |malformed zone Alias| |CVE-2013-3919 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=823664 https://bugzilla.novell.com/show_bug.cgi?id=823664#c3 Reinhard Max changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |max@suse.com AssignedTo|max@suse.com |security-team@suse.de --- Comment #3 from Reinhard Max 2013-06-11 07:16:53 CEST --- Looks like we're not affected: openSUSE 12.1 has 9.8.3-P4 openSUSE 12.2 has 9.9.1-P4 openSUSE 12.3 has 9.9.2-P1 SLE9 has 9.3.4 SLE10-SP3 has 9.3.4 SLE10-SP4 has 9.6-ESV-R7-P4 SLE11 has 9.6-ESV-R7-P4 SLE11-SP2 has 9.9.2-P2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=823664 https://bugzilla.novell.com/show_bug.cgi?id=823664#c5 Alexander Bergmann changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution| |INVALID --- Comment #5 from Alexander Bergmann 2013-06-11 08:04:08 UTC --- I just double checked current SLES versions. The responsible function findnoqname() was introduced with release 9.6-ESV-R8. SLES11-SP2 bind-9.6ESVR7P4-0.10.1 SLES11-SP1-LTSS bind-9.6ESVR7P4-0.2.5.1 SLES10-SP4 bind-9.6ESVR7P4-0.9.1 SLES10-SP3-LTSS bind-9.3.4-1.44.1 So no SLES version is affected. Closing bug as invalid. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=823664 https://bugzilla.novell.com/show_bug.cgi?id=823664#c6 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com --- Comment #6 from Marcus Meissner 2013-06-13 08:45:18 UTC --- I also posted a note to the CVE page. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.