Red Hat Security AdvisoryRHSA-2016:0079
bind security update
Released 2016-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux HPC Node EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.4, bind-libs-32:9.8.2-0.30.rc1.el6_6.4, bind-utils-32:9.8.2-0.30.rc1.el6_6.4
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.4, bind-chroot-32:9.8.2-0.30.rc1.el6_6.4, bind-devel-32:9.8.2-0.30.rc1.el6_6.4 +1
- Red Hat Enterprise Linux Server EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.4, bind-chroot-32:9.8.2-0.30.rc1.el6_6.4, bind-libs-32:9.8.2-0.30.rc1.el6_6.4 +2
- Red Hat Enterprise Linux Server Optional EUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.4, bind-devel-32:9.8.2-0.30.rc1.el6_6.4.ppc, bind-sdb-32:9.8.2-0.30.rc1.el6_6.4
Fixes 3 records
Priority CRITICAL 92KEV
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99584 · Published 2015-07-29 · Partial fix CWE-617
Priority MEDIUM 60
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.34929 · Published 2015-09-05 · Partial fix CWE-20
Priority MEDIUM 56
db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.55893 · Published 2015-12-16 · Partial fix CWE-20
THREATIST.IORead the docs