Red Hat Security AdvisoryRHSA-2010:0062
bind security update
Released 2010-01-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-4.P1.el5_4.2, bind-30:9.3.6-4.P1.el5_4.2.i386, bind-30:9.3.6-4.P1.el5_4.2.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-4.P1.el5_4.2, bind-30:9.3.6-4.P1.el5_4.2.i386, bind-libs-30:9.3.6-4.P1.el5_4.2 +5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.6-4.P1.el5_4.2, bind-chroot-30:9.3.6-4.P1.el5_4.2, bind-chroot-30:9.3.6-4.P1.el5_4.2.i386 +6
Fixes 3 records
Priority MEDIUM 43
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.07235 · Published 2010-01-22 · Fixed
Priority LOW 32
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authe…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09363 · Published 2010-01-22 · Fixed CWE-20
Priority LOW 28
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.06775 · Published 2010-01-22 · Fixed
THREATIST.IORead the docs