Part of a story covered by 13 sources: “Ubuntu patches nine advisories across Perl, FFmpeg, .NET, Netty, glibc, PHP, Python, Beets and Apache, then refreshes 24.04.5 LTS install media” — merged summary and timeline →
USN-8742-1: Netty vulnerability
AI summary · glm-5.3-flash
Ubuntu issues USN-8742-1 fixing a Netty DNS cache poisoning flaw caused by improper NS record bailiwick validation.
Ubuntu Security Notice USN-8742-1 addresses a vulnerability in the Netty framework in which NS records are incorrectly validated for bailiwick. An attacker could potentially exploit this to facilitate DNS cache poisoning attacks. Updated packages are available for supported Ubuntu releases.
- Netty fails to correctly validate bailiwick of NS records
- Flaw could enable DNS cache poisoning attacks
- Fixed via Ubuntu security update USN-8742-1
Full article
It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attacks.
This source does not provide full text. Read it at ubuntu.com.