Red Hat Security AdvisoryRHSA-2012:0717
bind97 security update
Released 2012-06-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) bind97-32:9.7.0-10.P2.el5_8.1, bind97-32:9.7.0-10.P2.el5_8.1.i386, bind97-chroot-32:9.7.0-10.P2.el5_8.1 +7
- Red Hat Enterprise Linux (v. 5 server) bind97-32:9.7.0-10.P2.el5_8.1, bind97-32:9.7.0-10.P2.el5_8.1.i386, bind97-32:9.7.0-10.P2.el5_8.1.ia64 +17
Fixes 2 records
Priority MEDIUM 51
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS…
CVSS 2.0HIGH 8.5· Network · No auth · Interaction — · EPSS 0.1326 · Published 2012-06-05 · Fixed CWE-189
Priority LOW 37
The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolva…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13066 · Published 2012-02-08 · Partial fix
