[B! security][bind] yifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yife id:yife

securityã¨bindã«é–¢ã™ã‚‹yifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ï¼ˆç·Šæ€¥ï¼‰BIND 9.xã®è„†å¼±æ€§ï¼ˆDNSã‚µãƒ¼ãƒ“ã‚¹ã®åœæ¢ï¼‰ã«ã¤ã„ã¦ï¼ˆCVE-2016-9131ï¼‰
--------------------------------------------------------------------- â– ï¼ˆç·Šæ€¥ï¼‰BIND 9.xã®è„†å¼±æ€§ï¼ˆDNSã‚µãƒ¼ãƒ“ã‚¹ã®åœæ¢ï¼‰ã«ã¤ã„ã¦ï¼ˆCVE-2016-9131ï¼‰ - ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã‚’å¼·ãæŽ¨å¥¨ - æ ªå¼ä¼šç¤¾æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã‚µãƒ¼ãƒ“ã‚¹ï¼ˆJPRSï¼‰ åˆç‰ˆä½œæˆ 2017/01/12ï¼ˆThuï¼‰ --------------------------------------------------------------------- â–¼æ¦‚è¦ BIND 9.xã«ãŠã‘ã‚‹å®Ÿè£…ä¸Šã®ä¸å…·åˆã«ã‚ˆã‚Šã€namedã«å¯¾ã™ã‚‹å¤–éƒ¨ã‹ã‚‰ã®ã‚µãƒ¼ãƒ“ ã‚¹ä¸èƒ½ï¼ˆDoSï¼‰æ”»æ’ƒãŒå¯èƒ½ã¨ãªã‚‹è„†å¼±æ€§ãŒã€é–‹ç™ºå…ƒã®ISCã‹ã‚‰ç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚ æœ¬è„†å¼±æ€§ã«ã‚ˆã‚Šã€æä¾›è€…ãŒæ„å›³ã—ãªã„ã‚µãƒ¼ãƒ“ã‚¹ã®åœæ¢ãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚ ã‚Šã¾ã™ã€‚ æœ¬è„†å¼±æ€§ã¯ã€ãƒ•ãƒ«ãƒªã‚¾ãƒ«ãƒãƒ¼ï¼ˆã‚ãƒ£ãƒƒã‚·ãƒ¥DNSã‚µãƒ¼ãƒãƒ¼
yife 2017/01/12
security

BIND
ãƒªãƒ³ã‚¯
ï¼ˆç·Šæ€¥ï¼‰BIND 9.xã®è„†å¼±æ€§ï¼ˆDNSã‚µãƒ¼ãƒ“ã‚¹ã®åœæ¢ï¼‰ã«ã¤ã„ã¦ï¼ˆCVE-2016-1285ï¼‰
--------------------------------------------------------------------- â– ï¼ˆç·Šæ€¥ï¼‰BIND 9.xã®è„†å¼±æ€§ï¼ˆDNSã‚µãƒ¼ãƒ“ã‚¹ã®åœæ¢ï¼‰ã«ã¤ã„ã¦ï¼ˆCVE-2016-1285ï¼‰ - ãƒ•ãƒ«ãƒªã‚¾ãƒ«ãƒãƒ¼ï¼ˆã‚ãƒ£ãƒƒã‚·ãƒ¥DNSã‚µãƒ¼ãƒãƒ¼ï¼‰ï¼æ¨©å¨DNSã‚µãƒ¼ãƒãƒ¼ã®åŒæ–¹ãŒå¯¾è±¡ã€ ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã‚’å¼·ãæŽ¨å¥¨ - æ ªå¼ä¼šç¤¾æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã‚µãƒ¼ãƒ“ã‚¹ï¼ˆJPRSï¼‰ åˆç‰ˆä½œæˆ 2016/03/10ï¼ˆThuï¼‰ --------------------------------------------------------------------- â–¼æ¦‚è¦ BIND 9.xã«ãŠã‘ã‚‹å®Ÿè£…ä¸Šã®ä¸å…·åˆã«ã‚ˆã‚Šã€namedã«å¯¾ã™ã‚‹å¤–éƒ¨ã‹ã‚‰ã®ã‚µãƒ¼ãƒ“ ã‚¹ä¸èƒ½ï¼ˆDoSï¼‰æ”»æ’ƒãŒå¯èƒ½ã¨ãªã‚‹è„†å¼±æ€§ãŒã€é–‹ç™ºå…ƒã®ISCã‹ã‚‰ç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚ æœ¬è„†å¼±æ€§ã«ã‚ˆã‚Šã€æä¾›è€…ãŒæ„å›³ã—ãªã„ã‚µãƒ¼ãƒ“ã‚¹ã®åœæ¢ãŒç™ºç”Ÿ
yife 2016/03/10
ãŠã£ã€ã¾ãŸBINDå…ˆè¼©ã®è„†å¼±æ€§æƒ…å ±ã

security

bind
ãƒªãƒ³ã‚¯
JVNVU#91383623: ISC BIND 9 ã«è¤‡æ•°ã®è„†å¼±æ€§
å½±éŸ¿ã‚’å—ã‘ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯è„†å¼±æ€§ã”ã¨ã«ç•°ãªã‚Šã¾ã™ãŒã€ã„ãšã‚Œã‚‚ DNS ãƒªã‚«ãƒ¼ã‚·ãƒ–ã‚µãƒ¼ãƒã«å½±éŸ¿ã‚’ä¸Žãˆã‚‹è„†å¼±æ€§ã§ã‚ã‚‹ãŸã‚ã€å½±éŸ¿ã¯åºƒç¯„å›²ã«åŠã¶å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ CVE-2015-5722 ã®è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã‚‹ã‚·ã‚¹ãƒ†ãƒ BIND 9.0.0 ã‹ã‚‰ 9.8.8 ã¾ã§ BIND 9.9.0 ã‹ã‚‰ 9.9.7-P2 ã¾ã§ BIND 9.10.0 ã‹ã‚‰ 9.10.2-P3 ã¾ã§ CVE-2015-5986 ã®è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã‚‹ã‚·ã‚¹ãƒ†ãƒ BIND 9.9.7 ã‹ã‚‰ 9.9.7-P2 ã¾ã§ BIND 9.10.2 ã‹ã‚‰ 9.10.2-P3 ã¾ã§ ç´°å·¥ã•ã‚ŒãŸ DNSSEC éµã®å‡¦ç†ã«èµ·å› ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹é‹ç”¨å¦¨å®³ (DoS) ã®è„†å¼±æ€§ - CVE-2015-5722 ISC ã®ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªã«ã¯æ¬¡ã®ã‚ˆã†ã«è¨˜è¼‰ã•ã‚Œã¦ã„ã¾ã™ã€‚ Parsing a malformed DNSSEC key can cause
yife 2015/09/03
bind

security

vulnerability
ãƒªãƒ³ã‚¯
BINDã®DOSè„†å¼±æ€§(CVE-2015-5477)ã«ã¤ã„ã¦ã®èª¿æŸ»ã¨å¯¾ç– - k0u5uk3â€™s blog
2015-08-01 BINDã®DOSè„†å¼±æ€§(CVE-2015-5477)ã«ã¤ã„ã¦ã®èª¿æŸ»ã¨å¯¾ç– vuln BINDã§DOSãŒç™ºç”Ÿã™ã‚‹è„†å¼±æ€§(CVE-2015-5477)ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚BIND 9.1.0ä»¥é™ã®ã™ã¹ã¦ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®BIND 9ãŒå¯¾è±¡ã¨ãªã‚Šã€ ã‹ã¤ãƒ•ãƒ«ãƒªã‚¾ãƒ«ãƒãƒ¼ï¼ˆã‚ãƒ£ãƒƒã‚·ãƒ¥DNSã‚µãƒ¼ãƒãƒ¼ï¼‰åŠã³æ¨©å¨DNSã‚µãƒ¼ãƒãƒ¼ã®åŒæ–¹ãŒå¯¾è±¡ã¨ãªã‚‹ã“ã¨ã‹ã‚‰ã€å¯¾è±¡ãŒåºƒç¯„å›²ã«ã‚ãŸã£ã¦ã„ã¾ã™ã€‚ ã¾ãŸè¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã§ã®è¿‚å›žæ–¹æ³•ãŒãªã„ã“ã¨ã‚‚å½±éŸ¿ãŒåºƒããªã£ã¦ã„ã‚‹è¦å› ã«ãªã£ã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ ãƒ‘ãƒƒãƒå†…å®¹ã®ç¢ºèª patchã‚’ç‰¹å®šã™ã‚‹ãŸã‚CVE-2015-5477ã®ä¿®æ£ã€é©ç”¨å‰ã¨é©ç”¨å¾Œã®ã‚½ãƒ¼ã‚¹ã‚’å–å¾— wget https://ftp.isc.org/isc/bind9/9.10.2-P3/bind-9.10.2-P3.tar.gz wget https://ftp.isc.org/isc/bind9/9.10.2-
yife 2015/08/12
bind

dns

security
ãƒªãƒ³ã‚¯
ï¼ˆç·Šæ€¥ï¼‰BIND 9.xã®è„†å¼±æ€§ï¼ˆDNSã‚µãƒ¼ãƒ“ã‚¹ã®åœæ¢ï¼‰ã«ã¤ã„ã¦ï¼ˆ2015å¹´7æœˆ31æ—¥æ›´æ–°ï¼‰
--------------------------------------------------------------------- â– ï¼ˆç·Šæ€¥ï¼‰BIND 9.xã®è„†å¼±æ€§ï¼ˆDNSã‚µãƒ¼ãƒ“ã‚¹ã®åœæ¢ï¼‰ã«ã¤ã„ã¦ï¼ˆ2015å¹´7æœˆ31æ—¥æ›´æ–°ï¼‰ - ãƒ•ãƒ«ãƒªã‚¾ãƒ«ãƒãƒ¼ï¼ˆã‚ãƒ£ãƒƒã‚·ãƒ¥DNSã‚µãƒ¼ãƒãƒ¼ï¼‰ï¼æ¨©å¨DNSã‚µãƒ¼ãƒãƒ¼ã®åŒæ–¹ãŒå¯¾è±¡ã€ ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã‚’å¼·ãæŽ¨å¥¨ - æ ªå¼ä¼šç¤¾æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã‚µãƒ¼ãƒ“ã‚¹ï¼ˆJPRSï¼‰ åˆç‰ˆä½œæˆ 2015/07/29ï¼ˆWedï¼‰ æœ€çµ‚æ›´æ–° 2015/07/31ï¼ˆFriï¼‰ ï¼ˆPoCãŒå…¬é–‹ã•ã‚Œã€æ—¥æœ¬å›½å†…ã«ãŠã„ã¦è¢«å®³äº‹ä¾‹ãŒå ±å‘Šã•ã‚ŒãŸæ—¨ã‚’è¿½åŠ ï¼‰ --------------------------------------------------------------------- â–¼æ¦‚è¦ BIND 9.xã«ãŠã‘ã‚‹å®Ÿè£…ä¸Šã®ä¸å…·åˆã«ã‚ˆã‚Šã€namedã«å¯¾ã™ã‚‹å¤–éƒ¨ã‹ã‚‰ã®ã‚µãƒ¼ãƒ“ ã‚¹ä¸èƒ½ï¼ˆDoSï¼‰æ”»æ’ƒãŒå¯
yife 2015/07/29
security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

bind

dns

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ï¼ˆç·Šæ€¥ï¼‰è¤‡æ•°ã®DNSã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã«ãŠã‘ã‚‹è„†å¼±æ€§ï¼ˆã‚·ã‚¹ãƒ†ãƒ è³‡æºã®éŽåº¦ãªæ¶ˆè²»ï¼‰ã«ã¤ã„ã¦ï¼ˆ2014å¹´12æœˆ25æ—¥æ›´æ–°ï¼‰
--------------------------------------------------------------------- â– ï¼ˆç·Šæ€¥ï¼‰è¤‡æ•°ã®DNSã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã«ãŠã‘ã‚‹è„†å¼±æ€§ï¼ˆã‚·ã‚¹ãƒ†ãƒ è³‡æºã®éŽåº¦ãªæ¶ˆè²»ï¼‰ ã«ã¤ã„ã¦ï¼ˆ2014å¹´12æœˆ9æ—¥å…¬é–‹ï¼‰ - BIND 9ã§ã¯æ¨©å¨DNSã‚µãƒ¼ãƒãƒ¼ã«ã‚‚é™å®šçš„ã«å½±éŸ¿ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã‚’å¼·ãæŽ¨å¥¨ - æ ªå¼ä¼šç¤¾æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã‚µãƒ¼ãƒ“ã‚¹ï¼ˆJPRSï¼‰ åˆç‰ˆä½œæˆ 2014/12/09ï¼ˆTueï¼‰ æœ€çµ‚æ›´æ–° 2014/12/25ï¼ˆThuï¼‰ ï¼ˆç±³å›½The CERT Divisionã®æ³¨æ„å–šèµ·ãƒ»Vendor Informationã¸ã®ãƒªãƒ³ã‚¯ã‚’è¿½åŠ ï¼‰ --------------------------------------------------------------------- â–¼æ¦‚è¦ BIND 9ãƒ»Unboundãƒ»PowerDNS Recursorã‚’å«ã‚€è¤‡
yife 2014/12/09
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

vulnerability

è„†å¼±æ€§

bind

dns
ãƒªãƒ³ã‚¯
CVE-2013-2266 [JP]: ä¸æ£ã«ç´°å·¥ã•ã‚ŒãŸæ£è¦è¡¨ç¾ã«ã‚ˆã£ã¦namedãŒãƒ¡ãƒ¢ãƒªä¸è¶³ã«ãªã‚‹
Prev Next BIND 9ã®æ·±åˆ»ãªæ¬ é™¥ã«ã‚ˆã‚Šã€æ”»æ’ƒè€…ãŒã€namedã€ãŠã‚ˆã³libdnsã‚’ãƒªãƒ³ã‚¯ã™ã‚‹ä»–ã®ãƒ—ãƒ©ã‚°ãƒ©ãƒ ã®ãƒ¡ãƒ¢ãƒªã‚’éŽå¤§ã«æ¶ˆè²»ã•ã›ã‚‹ã“ã¨ãŒå¯èƒ½ã¨ãªã‚Šã¾ã™ã€‚ CVE: CVE-2013-2266 æ–‡æ›¸ãƒãƒ¼ã‚¸ãƒ§ãƒ³: 2.0 å…¬é–‹æ—¥ä»˜: 2013å¹´3æœˆ26æ—¥ å½±éŸ¿ã‚’å—ã‘ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ : BIND å½±éŸ¿ã‚’å—ã‘ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³: BIND 9.7.x, 9.8.0 ã‹ã‚‰ 9.8.5b1, 9.9.0 ã‹ã‚‰ 9.9.3b1(ã„ãšã‚Œã‚‚"Unix"ç‰ˆã®ã¿ã€‚Windowsç‰ˆã¯å½±éŸ¿ã‚’å—ã‘ãªã„ã€‚9.7.0ã‚ˆã‚Šå‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³(9.6-ESVã‚’å«ã‚€)ã‚‚å½±éŸ¿ã‚’å—ã‘ãªã„ã€‚BIND 10ã‚‚å½±éŸ¿ã‚’å—ã‘ãªã„) æ·±åˆ»åº¦: é‡å¤§(Critical) æ”»æ’ƒæ–¹æ³•: é éš”ã‹ã‚‰å¯èƒ½ è©³ç´°: Unixç³»ã®ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã§ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã•ã‚ŒãŸBIND 9.7, 9.8, ãŠã‚ˆã³9.9ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®æ¬ é™¥ã«ã‚ˆã‚Šã€æ”»æ’ƒè€…
yife 2013/03/27
bind

DNS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æ£è¦è¡¨ç¾

CVE-2013-2266

security
ãƒªãƒ³ã‚¯
1