14 DAY TRIAL // A vulnerability that would allow users to crash Bind with specially crafted network traffic has been found and repaired in Ubuntu 15.04, Ubuntu 14.10, Ubuntu 14.04 LTS, and Ubuntu 12.04 LTS.
The Ubuntu maintainers have been very busy these past few weeks, and they have been closing a lot of vulnerabilities. It's true that most of them weren't all that dangerous, but that doesn't mean that upgrading the operating system as often as possible is not a good idea.
"Breno Silveira Soares discovered that Bind incorrectly handled certain zone data when configured to perform DNSSEC validation. A remote attacker could use this issue with specially crafted zone data to cause Bind to crash, resulting in a denial of service," is noted in the security notice.
More details about this issue can be found in the initial security notice. The problem can be easily solved if users upgrade to the latest bind9 packages, specific to each distribution. Users can either use the automated process available in every Ubuntu version, or they can use the terminal. If they choose the terminal, they will need to enter the following commands (root is needed):
sudo apt-get dist-upgrade