Bind 9.16.1 crash

Ben Bridges bbridges at springnet.net
Thu Dec 8 00:29:00 UTC 2022 

It looks like that issue was occurring in a different part of the netmgr code and was fixed 8 months ago.

Thanks,
Ben Bridges

From: bind-users <bind-users-bounces at lists.isc.org> On Behalf Of Andrew Latham
Sent: Wednesday, December 7, 2022 2:35 PM
Cc: bind-users at lists.isc.org
Subject: Re: Bind 9.16.1 crash

I see https://gitlab.isc.org/isc-projects/bind9/-/issues/3020<https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitlab.isc.org%2Fisc-projects%2Fbind9%2F-%2Fissues%2F3020&data=05%7C01%7Cbbridges%40springnet.net%7Cecd73a07950646259c7e08dad8928a21%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060421148193611%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Fn7fvXD1Lp5Qgy3O910j%2FG3FyPLtYvBRexwPdP0C9Js%3D&reserved=0> and https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/5998<https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitlab.isc.org%2Fisc-projects%2Fbind9%2F-%2Fmerge_requests%2F5998&data=05%7C01%7Cbbridges%40springnet.net%7Cecd73a07950646259c7e08dad8928a21%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060421148193611%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=8hkJR7%2FyIrc2dpUv%2FTYyBKqL2IiumjsZVFfw5yZ2Bog%3D&reserved=0> which might help

I did not see a CVE but only did a quick search


On Wed, Dec 7, 2022 at 12:33 PM Ben Bridges <bbridges at springnet.net<mailto:bbridges at springnet.net>> wrote:
Greetings.

This morning one of our BIND daemons crashed.  The following messages were logged in named.run at the time:

07-Dec-2022 11:58:37.097 general: critical: netmgr.c:687: REQUIRE((__builtin_expect(!!((sock) != ((void *)0)), 1) && __builtin_expect(!!(((const isc__magic_t *)(sock))->magic == ((('N') << 24 | ('M') << 16 | ('S') << 8 | ('K')))), 1))) failed, back trace
07-Dec-2022 11:58:37.097 general: critical: #0 0x56508c798e43 in ??
07-Dec-2022 11:58:37.097 general: critical: #1 0x7fa72e881ac0 in ??
07-Dec-2022 11:58:37.097 general: critical: #2 0x7fa72e89978a in ??
07-Dec-2022 11:58:37.097 general: critical: #3 0x7fa72e89a240 in ??
07-Dec-2022 11:58:37.097 general: critical: #4 0x7fa72e89e18b in ??
07-Dec-2022 11:58:37.097 general: critical: #5 0x7fa72eb67707 in ??
07-Dec-2022 11:58:37.097 general: critical: #6 0x7fa72eb68fe9 in ??
07-Dec-2022 11:58:37.097 general: critical: #7 0x7fa72eb779b0 in ??
07-Dec-2022 11:58:37.097 general: critical: #8 0x7fa72eb7f9a7 in ??
07-Dec-2022 11:58:37.097 general: critical: #9 0x7fa72eb8116e in ??
07-Dec-2022 11:58:37.097 general: critical: #10 0x7fa72eb816cd in ??
07-Dec-2022 11:58:37.097 general: critical: #11 0x7fa72eb823c9 in ??
07-Dec-2022 11:58:37.097 general: critical: #12 0x7fa72eb884c6 in ??
07-Dec-2022 11:58:37.097 general: critical: #13 0x7fa72e8a8fa1 in ??
07-Dec-2022 11:58:37.097 general: critical: #14 0x7fa72e370609 in ??
07-Dec-2022 11:58:37.097 general: critical: #15 0x7fa72e28f133 in ??
07-Dec-2022 11:58:37.097 general: critical: exiting (due to assertion failure)

I did some googling and was unable to find this specific "netmgr.c:687" message.  Is this assertion failure due to a known CVE (perhaps recently discovered and not yet patched)?  We've had no issues with this server up to this point.  The BIND version is 9.16.1 running on a fully patched Ubuntu 20.04.5 server.  This server does nothing other than run BIND.  Any assistance determining what happened and how to prevent it from happening again would be much appreciated.  If this is not the proper forum for this posting, please point me in the right direction.

Thanks,
Ben Bridges






Sales 417.575.7000 | Support 417.874.8000 | springnet.net<https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7Cecd73a07950646259c7e08dad8928a21%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060421148193611%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zJFfISvidD%2FlkA0kDNyzzNK8lyI4deHQDoTLIHb0Qn0%3D&reserved=0>
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users<https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7Cecd73a07950646259c7e08dad8928a21%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060421148193611%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zJFfISvidD%2FlkA0kDNyzzNK8lyI4deHQDoTLIHb0Qn0%3D&reserved=0>

<https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7Cecd73a07950646259c7e08dad8928a21%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060421148193611%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zJFfISvidD%2FlkA0kDNyzzNK8lyI4deHQDoTLIHb0Qn0%3D&reserved=0>
 <https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7Cecd73a07950646259c7e08dad8928a21%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060421148193611%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zJFfISvidD%2FlkA0kDNyzzNK8lyI4deHQDoTLIHb0Qn0%3D&reserved=0>
-- <https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7Cecd73a07950646259c7e08dad8928a21%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060421148193611%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zJFfISvidD%2FlkA0kDNyzzNK8lyI4deHQDoTLIHb0Qn0%3D&reserved=0>
- Andrew "lathama" Latham -<https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7Cecd73a07950646259c7e08dad8928a21%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060421148193611%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zJFfISvidD%2FlkA0kDNyzzNK8lyI4deHQDoTLIHb0Qn0%3D&reserved=0>

[City Utilities]

[SpringNet]<http://www.springnet.net>

Sales 417.575.7000 | Support 417.874.8000 | springnet.net<http://www.springnet.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20221208/956ac41b/attachment-0001.htm>

More information about the bind-users mailing list