Two vulnerabilities have been reported in ISC BIND, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error when handling certain queries can be exploited to use a "bad cache" data structure and trigger an assertion.

Successful exploitation of this vulnerability requires that DNSSEC validation is enabled.

This vulnerability is reported in versions 9.6-ESV-R1 through 9.6-ESV-R7-P1, 9.7.1 through 9.7.6-P1, 9.8.0 through 9.8.3-P1, and 9.9.0 through 9.9.1-P1.

2) A memory leak error when processing TCP queries can be exploited to increase the number of misplaced ns_client objects and trigger an out-of-memory condition.

This vulnerability is reported in versions 9.9.0 through 9.9.1-P1.

Solution
Update to version 9.9.1-P2, 9.8.3-P2, 9.7.6-P2, or 9.6-ESV-R7-P2.

Provided and/or discovered by
The vendor credits:
1) Einar Lonn, IIS.se
2) Kevin Sheehan, Infoblox, Inc. and Anand Buddhdev, RIPE NCC.

Original Advisory
https://www.isc.org/software/aftr/advisories/cve-2012-3817
https://www.isc.org/software/bind/advisories/cve-2012-3868

Deep Links
Links available to Secunia VIM customers