Red Hat Security AdvisoryRHSA-2016:0078
bind security update
Released 2016-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.7, bind-chroot-32:9.8.2-0.17.rc1.el6_4.7, bind-libs-32:9.8.2-0.17.rc1.el6_4.7 +1
- Red Hat Enterprise Linux Server AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.2, bind-chroot-32:9.8.2-0.23.rc1.el6_5.2, bind-libs-32:9.8.2-0.23.rc1.el6_5.2 +1
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.7, bind-devel-32:9.8.2-0.17.rc1.el6_4.7, bind-sdb-32:9.8.2-0.17.rc1.el6_4.7
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.2, bind-devel-32:9.8.2-0.23.rc1.el6_5.2, bind-sdb-32:9.8.2-0.23.rc1.el6_5.2
Fixes 4 records
Priority CRITICAL 92KEV
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99584 · Published 2015-07-29 · Partial fix CWE-617
Priority HIGH 68
ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.58967 · Published 2014-12-11 · Fixed CWE-399
Priority MEDIUM 60
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.34929 · Published 2015-09-05 · Partial fix CWE-20
Priority MEDIUM 56
db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.55893 · Published 2015-12-16 · Partial fix CWE-20
THREATIST.IORead the docs