Red Hat Security AdvisoryRHSA-2010:0976
bind security update
Released 2010-12-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-4.P1.el5_5.3, bind-30:9.3.6-4.P1.el5_5.3.i386, bind-30:9.3.6-4.P1.el5_5.3.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-4.P1.el5_5.3, bind-30:9.3.6-4.P1.el5_5.3.i386, bind-libs-30:9.3.6-4.P1.el5_5.3 +5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.6-4.P1.el5_5.3, bind-chroot-30:9.3.6-4.P1.el5_5.3, bind-chroot-30:9.3.6-4.P1.el5_5.3.i386 +6
Fixes 3 records
Priority MEDIUM 44
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, wh…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.14503 · Published 2010-12-03 · Partial fix CWE-20
Priority LOW 31
ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08086 · Published 2010-10-05 · Fixed CWE-20
Priority LOW 30
named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allo…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.091 · Published 2010-12-03 · Partial fix CWE-264
THREATIST.IORead the docs