Red Hat Security Advisory

RHSA-2016:2099

bind security update

Released 2016-10-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux HPC Node EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.6, bind-libs-32:9.8.2-0.30.rc1.el6_6.6, bind-utils-32:9.8.2-0.30.rc1.el6_6.6
Red Hat Enterprise Linux HPC Node EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.8, bind-libs-32:9.8.2-0.37.rc1.el6_7.8, bind-utils-32:9.8.2-0.37.rc1.el6_7.8
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.6, bind-chroot-32:9.8.2-0.30.rc1.el6_6.6, bind-devel-32:9.8.2-0.30.rc1.el6_6.6 +1
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.8, bind-chroot-32:9.8.2-0.37.rc1.el6_7.8, bind-devel-32:9.8.2-0.37.rc1.el6_7.8 +1
Red Hat Enterprise Linux Server AUS (v. 6.2) bind-32:9.7.3-8.P3.el6_2.5, bind-chroot-32:9.7.3-8.P3.el6_2.5, bind-libs-32:9.7.3-8.P3.el6_2.5 +1
Red Hat Enterprise Linux Server AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.9, bind-chroot-32:9.8.2-0.17.rc1.el6_4.9, bind-libs-32:9.8.2-0.17.rc1.el6_4.9 +1
Red Hat Enterprise Linux Server AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.4, bind-chroot-32:9.8.2-0.23.rc1.el6_5.4, bind-libs-32:9.8.2-0.23.rc1.el6_5.4 +1
Red Hat Enterprise Linux Server EUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.6, bind-chroot-32:9.8.2-0.30.rc1.el6_6.6, bind-libs-32:9.8.2-0.30.rc1.el6_6.6 +2
Red Hat Enterprise Linux Server EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.8, bind-chroot-32:9.8.2-0.37.rc1.el6_7.8, bind-libs-32:9.8.2-0.37.rc1.el6_7.8 +2
Red Hat Enterprise Linux Server Optional AUS (v. 6.2) bind-32:9.7.3-8.P3.el6_2.5, bind-devel-32:9.7.3-8.P3.el6_2.5, bind-sdb-32:9.7.3-8.P3.el6_2.5
Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.9, bind-devel-32:9.8.2-0.17.rc1.el6_4.9, bind-sdb-32:9.8.2-0.17.rc1.el6_4.9
Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.4, bind-devel-32:9.8.2-0.23.rc1.el6_5.4, bind-sdb-32:9.8.2-0.23.rc1.el6_5.4
Red Hat Enterprise Linux Server Optional EUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.6, bind-devel-32:9.8.2-0.30.rc1.el6_6.6.ppc, bind-sdb-32:9.8.2-0.30.rc1.el6_6.6
Red Hat Enterprise Linux Server Optional EUS (v. 6.7) bind-devel-32:9.8.2-0.37.rc1.el6_7.8, bind-devel-32:9.8.2-0.37.rc1.el6_7.8.ppc, bind-sdb-32:9.8.2-0.37.rc1.el6_7.8
Red Hat Enterprise Linux Server Optional TUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.4, bind-devel-32:9.8.2-0.23.rc1.el6_5.4, bind-sdb-32:9.8.2-0.23.rc1.el6_5.4
Red Hat Enterprise Linux Server TUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.4, bind-chroot-32:9.8.2-0.23.rc1.el6_5.4, bind-libs-32:9.8.2-0.23.rc1.el6_5.4 +1

Fixes 2 records

TI-2016-02320 CVE-2016-2776 · GHSA-jxr9-jr43-c424

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x…

HIGH 75

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure a…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.89482 Published 2016-09-28 Partial fix CWE-20

TI-2016-02389 CVE-2016-2848 · GHSA-j4vg-xpv6-9x2m

ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to…

MEDIUM 54

ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.25772 Published 2016-10-21 Partial fix CWE-20