DescriptionThe GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having moderate severity.
|National Vulnerability Database|
Note from the SUSE Security TeamThis issue only affect bind 9.10.0 to 9.10.1, which SUSE did not ship yet. No SUSE product is affected by this problem. SUSE Bugzilla entry: 908995 No SUSE Security Announcements cross referenced.
List of released packages
|Product(s)||Fixed package version(s)||References|
|SUSE Linux Enterprise Module for Basesystem 15|| ||Patchnames:
SUSE Linux Enterprise Module for Basesystem 15 GA bind-devel
|SUSE Linux Enterprise Module for Server Applications 15|| ||Patchnames:
SUSE Linux Enterprise Module for Server Applications 15 GA bind
|openSUSE Leap 15.0|| ||Patchnames:
openSUSE Leap 15.0 GA bind
|openSUSE Tumbleweed|| ||Patchnames:
openSUSE Tumbleweed GA bind
Status of this issue by product and package
Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification.
|SUSE Linux Enterprise Desktop 12 GA||bind||Not affected|
|SUSE Linux Enterprise SDK 12 GA||bind||Not affected|
|SUSE Linux Enterprise Server 12 GA||bind||Not affected|