Bug#717936: bind9: CVE-2013-4854: A specially crafted query can cause BIND to terminate abnormally

[Salvatore Bonaccorso]

Control: tags -1 + patch

Attached is the diff to relevant code between bind-9.8.5-P1 and
bind-9.8.5-P2.

Are you working on updates?

Regards,
Salvatore

diff -pruN bind-9.8.5-P1/lib/dns/rdata/generic/keydata_65533.c bind-9.8.5-P2/lib/dns/rdata/generic/keydata_65533.c
--- bind-9.8.5-P1/lib/dns/rdata/generic/keydata_65533.c	2013-06-04 12:30:22.000000000 -0600
+++ bind-9.8.5-P2/lib/dns/rdata/generic/keydata_65533.c	2013-07-16 16:11:52.000000000 -0600
@@ -176,7 +176,7 @@ fromwire_keydata(ARGS_FROMWIRE) {
 	UNUSED(options);
 
 	isc_buffer_activeregion(source, &sr);
-	if (sr.length < 4)
+	if (sr.length < 16)
 		return (ISC_R_UNEXPECTEDEND);
 
 	isc_buffer_forward(source, sr.length);