Red Hat Security AdvisoryRHSA-2012:0716
bind security update
Released 2012-06-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) bind-30:9.3.6-20.P1.el5_8.1, bind-chroot-30:9.3.6-20.P1.el5_8.1, bind-chroot-30:9.3.6-20.P1.el5_8.1.i386 +6
- Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-20.P1.el5_8.1, bind-30:9.3.6-20.P1.el5_8.1.i386, bind-30:9.3.6-20.P1.el5_8.1.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-20.P1.el5_8.1, bind-30:9.3.6-20.P1.el5_8.1.i386, bind-libs-30:9.3.6-20.P1.el5_8.1 +5
- Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-libs-32:9.7.3-8.P3.el6_2.3, bind-utils-32:9.7.3-8.P3.el6_2.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-chroot-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3 +1
- Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-libs-32:9.7.3-8.P3.el6_2.3, bind-utils-32:9.7.3-8.P3.el6_2.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-chroot-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3 +1
- Red Hat Enterprise Linux Server (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-chroot-32:9.7.3-8.P3.el6_2.3, bind-libs-32:9.7.3-8.P3.el6_2.3 +2
- Red Hat Enterprise Linux Server Optional (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3.ppc +1
- Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-chroot-32:9.7.3-8.P3.el6_2.3, bind-libs-32:9.7.3-8.P3.el6_2.3 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) bind-32:9.7.3-8.P3.el6_2.3, bind-devel-32:9.7.3-8.P3.el6_2.3, bind-sdb-32:9.7.3-8.P3.el6_2.3
Fixes 2 records
Priority MEDIUM 51
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS…
CVSS 2.0HIGH 8.5· Network · No auth · Interaction — · EPSS 0.1326 · Published 2012-06-05 · Fixed CWE-189
Priority LOW 37
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolva…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13066 · Published 2012-02-08 · Partial fix
