[dns-operations] BIND Security Advisory May 2011: Large RRSIG RRsets and Negative Caching can crash named

SM sm at resistor.net
Fri May 27 08:55:25 UTC 2011


Hi Emanuele,
At 01:15 27-05-2011, Emanuele Balla (aka Skull) wrote:
>Interestingly enough, I had a bunch of named crash yesterday night on 2
>bind resolver instances (validation enabled) serving our mailservers.
>
>These are named last words (time is CEST):
>
>May 26 22:24:02 dns2 named[27443]: buffer.c:285: REQUIRE(b->used + 1 <=
>b->length) failed, back trace

Frank Kloeker posted to a message to bind-users by  around 18:33 UTC 
on May 26 [1].

>Is there a chance this is the same bug you're talking about?

Yes.

Regards,
-sm

1. https://lists.isc.org/pipermail/bind-users/2011-May/083803.html 




More information about the dns-operations mailing list