Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-23 Thread Paul Ebersman
larissas> When an authoritative server processes a successful IXFR larissas> transfer or a dynamic update, there is a small window of time larissas> during which the IXFR/update coupled with a query may cause a larissas> deadlock to occur. The issue is a write lock. The bug can be triggered by an

Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-23 Thread David Coulthart
On Feb 22, 2011, at 3:55 PM, Larissa Shapiro wrote: > Description and Impact: > > When an authoritative server processes a successful IXFR transfer or a > dynamic update, there is a small window of time during which the IXFR/update > coupled with a query may cause a deadlock to occur. This deadl

RE: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Takuya Matsumoto
: bind-users@lists.isc.org Subject: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate Internet Systems Consortium Security Advisory Title: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate (http

Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Dennis Clarke
> Hi Dennis, > > Thank you for getting 9.7.3 out on Solaris, that is a huge help in > getting this important update out there. I have been running 9.7.3 for a few days now on all my production DNS servers ( a bunch ) and a few in client sites in Europe. All seems to be running very well and the u

Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Larissa Shapiro
Hi Dennis, Thank you for getting 9.7.3 out on Solaris, that is a huge help in getting this important update out there. I do not know the answer to your question about the NIST CVE listings, but I will inquire. Our CVE numbers actually come to us from Carnegie-Mellon CERT, not NIST, but NIST does

Re: Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Dennis Clarke
Sorry for the top post but there is no data yet at http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0414. I'll assume that is coming along. I have 9.7.3 ready for relase on Solaris 8 and 9 and 10 however I wanted to refer to the various security info sites. Do you know if the folks at nis

Security Advisory: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate

2011-02-22 Thread Larissa Shapiro
Internet Systems Consortium Security Advisory Title: Server Lockup Upon IXFR or DDNS Update Combined with High Query Rate (http://www.isc.org/software/bind/advisories/cve-2011-0414) CVE-2011-0414 VU#559980 CVSS: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C) for more inf