ISC BIND Multiple Denial of Service Vulnerabilities

Multiple vulnerabilities have been identified in ISC BIND, which can be exploited by malicious people to cause a DoS (Denial of Service).  The vulnerability is caused due to an error when handling UPDATE requests and can be exploited to terminate the named process by sending specially crafted UPDATE requests.

1. Errors within the "Response Policy Zones" (RPZ) feature when processing DNAME and CNAME records can be exploited to terminate the named process.
   Successful exploitation requires that recursion is enabled and the server is configured to use RPZ.
2. A vulnerability is caused due to an error when handling UPDATE requests.