CVE2013-4854 query

2013-08-03 Thread autoqos
The Knowledge Base article https://kb.isc.org/article/AA-01016 for CVE2013-4854 mentions that the defect is in the code that prepares a logging message during processing of the query.Are DNS servers running bind 9.8.0 that are configured not to log DNS queries vulnerable.

Re: CVE2013-4854 query

2013-08-03 Thread Mark Andrews
All servers are vulnerable. All applications linked with the libraries are vulnerable. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists