Red Hat Security Advisory

RHSA-2014:1984

bind security update

Released 2014-12-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-25.P1.el5_11.2, bind-30:9.3.6-25.P1.el5_11.2.i386, bind-30:9.3.6-25.P1.el5_11.2.ia64 +29
Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-14.el7_0.1, bind-libs-32:9.9.4-14.el7_0.1, bind-libs-lite-32:9.9.4-14.el7_0.1 +2
Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-14.el7_0.1, bind-chroot-32:9.9.4-14.el7_0.1, bind-devel-32:9.9.4-14.el7_0.1 +3
Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-14.el7_0.1, bind-libs-32:9.9.4-14.el7_0.1, bind-libs-lite-32:9.9.4-14.el7_0.1 +2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-14.el7_0.1, bind-chroot-32:9.9.4-14.el7_0.1, bind-devel-32:9.9.4-14.el7_0.1 +3
Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-25.P1.el5_11.2, bind-30:9.3.6-25.P1.el5_11.2.i386, bind-libs-30:9.3.6-25.P1.el5_11.2 +5
Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.30.rc1.el6_6.1, bind-libs-32:9.8.2-0.30.rc1.el6_6.1, bind-utils-32:9.8.2-0.30.rc1.el6_6.1
Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.30.rc1.el6_6.1, bind-chroot-32:9.8.2-0.30.rc1.el6_6.1, bind-devel-32:9.8.2-0.30.rc1.el6_6.1 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.6-25.P1.el5_11.2, bind-chroot-30:9.3.6-25.P1.el5_11.2, bind-chroot-30:9.3.6-25.P1.el5_11.2.i386 +6
Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.30.rc1.el6_6.1, bind-libs-32:9.8.2-0.30.rc1.el6_6.1, bind-utils-32:9.8.2-0.30.rc1.el6_6.1
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.30.rc1.el6_6.1, bind-chroot-32:9.8.2-0.30.rc1.el6_6.1, bind-devel-32:9.8.2-0.30.rc1.el6_6.1 +1
Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.30.rc1.el6_6.1, bind-chroot-32:9.8.2-0.30.rc1.el6_6.1, bind-libs-32:9.8.2-0.30.rc1.el6_6.1 +2
Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-14.el7_0.1, bind-chroot-32:9.9.4-14.el7_0.1, bind-libs-32:9.9.4-14.el7_0.1 +5
Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.30.rc1.el6_6.1, bind-devel-32:9.8.2-0.30.rc1.el6_6.1.ppc, bind-sdb-32:9.8.2-0.30.rc1.el6_6.1
Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-14.el7_0.1, bind-devel-32:9.9.4-14.el7_0.1.ppc, bind-lite-devel-32:9.9.4-14.el7_0.1 +3
Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.30.rc1.el6_6.1, bind-chroot-32:9.8.2-0.30.rc1.el6_6.1, bind-libs-32:9.8.2-0.30.rc1.el6_6.1 +1
Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-14.el7_0.1, bind-chroot-32:9.9.4-14.el7_0.1, bind-libs-32:9.9.4-14.el7_0.1 +3
Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.30.rc1.el6_6.1, bind-sdb-32:9.8.2-0.30.rc1.el6_6.1
Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-14.el7_0.1, bind-lite-devel-32:9.9.4-14.el7_0.1, bind-sdb-32:9.9.4-14.el7_0.1 +1

Fixes 1 record

TI-2014-06976 CVE-2014-8500 · GHSA-qcv9-4m2r-585w

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not…

HIGH 68

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.58967 Published 2014-12-11 Fixed CWE-399