All Bind servers crashed

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed Nov 16 08:57:18 UTC 2011


On Wed, Nov 16, 2011 at 09:47:48AM +0100,
 Magnus Schmidt <ms at bisping.de> wrote 
 a message of 49 lines which said:

> Nov 16 05:30:41 xxx named[1326]: critical: query.c:1781: INSIST(!
> dns_rdataset_isassociated(sigrdataset)) failed, back trace

It looks like CVE-2010-3613
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613> <http://www.isc.org/software/bind/advisories/cve-2010-3613> but:

> All are running under Debian Squeeze with version
> 1:9.7.3.dfsg-1~squeeze3.

Strange because it should not be vulnerable. May be a similar
unreported bug? Samer Khattab and nicku just reported a very similar bug
(messages "BIND 9.7.3-P3 crash on multiple cashing servers" and
"bind-9.8.1: INSIST(! dns_rdataset _isassociated(sigrdataset))
failed").






More information about the bind-users mailing list