Red Hat Security Advisory

RHSA-2017:1582

bind security and bug fix update

Released 2017-06-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux HPC Node EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.11, bind-libs-32:9.8.2-0.37.rc1.el6_7.11, bind-utils-32:9.8.2-0.37.rc1.el6_7.11
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.11, bind-chroot-32:9.8.2-0.37.rc1.el6_7.11, bind-devel-32:9.8.2-0.37.rc1.el6_7.11 +1
Red Hat Enterprise Linux Server AUS (v. 6.2) bind-32:9.7.3-8.P3.el6_2.9, bind-chroot-32:9.7.3-8.P3.el6_2.9, bind-libs-32:9.7.3-8.P3.el6_2.9 +1
Red Hat Enterprise Linux Server AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.12, bind-chroot-32:9.8.2-0.17.rc1.el6_4.12, bind-libs-32:9.8.2-0.17.rc1.el6_4.12 +1
Red Hat Enterprise Linux Server AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.7, bind-chroot-32:9.8.2-0.23.rc1.el6_5.7, bind-libs-32:9.8.2-0.23.rc1.el6_5.7 +1
Red Hat Enterprise Linux Server AUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.9, bind-chroot-32:9.8.2-0.30.rc1.el6_6.9, bind-libs-32:9.8.2-0.30.rc1.el6_6.9 +1
Red Hat Enterprise Linux Server EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.11, bind-chroot-32:9.8.2-0.37.rc1.el6_7.11, bind-libs-32:9.8.2-0.37.rc1.el6_7.11 +2
Red Hat Enterprise Linux Server Optional AUS (v. 6.2) bind-32:9.7.3-8.P3.el6_2.9, bind-devel-32:9.7.3-8.P3.el6_2.9, bind-sdb-32:9.7.3-8.P3.el6_2.9
Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.12, bind-devel-32:9.8.2-0.17.rc1.el6_4.12, bind-sdb-32:9.8.2-0.17.rc1.el6_4.12
Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.7, bind-devel-32:9.8.2-0.23.rc1.el6_5.7, bind-sdb-32:9.8.2-0.23.rc1.el6_5.7
Red Hat Enterprise Linux Server Optional AUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.9, bind-sdb-32:9.8.2-0.30.rc1.el6_6.9
Red Hat Enterprise Linux Server Optional EUS (v. 6.7) bind-devel-32:9.8.2-0.37.rc1.el6_7.11, bind-devel-32:9.8.2-0.37.rc1.el6_7.11.ppc, bind-sdb-32:9.8.2-0.37.rc1.el6_7.11
Red Hat Enterprise Linux Server Optional TUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.7, bind-devel-32:9.8.2-0.23.rc1.el6_5.7, bind-sdb-32:9.8.2-0.23.rc1.el6_5.7
Red Hat Enterprise Linux Server Optional TUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.9, bind-sdb-32:9.8.2-0.30.rc1.el6_6.9
Red Hat Enterprise Linux Server TUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.7, bind-chroot-32:9.8.2-0.23.rc1.el6_5.7, bind-libs-32:9.8.2-0.23.rc1.el6_5.7 +1
Red Hat Enterprise Linux Server TUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.9, bind-chroot-32:9.8.2-0.30.rc1.el6_6.9, bind-libs-32:9.8.2-0.30.rc1.el6_6.9 +1

Fixes 3 records

TI-2016-07486 CVE-2016-9147 · GHSA-q76v-gxg3-wx5g

named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to…

MEDIUM 54

named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.24602 Published 2017-01-12 Fixed CWE-20

TI-2017-02357 CVE-2017-3137 · GHSA-wmp5-3j44-5x2x

A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

MEDIUM 44

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when process…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08902 Published 2019-01-16 Partial fix CWE-617

TI-2017-02359 CVE-2017-3139 · GHSA-qr8v-h24f-rg77

Reachable assertion in Red Hat BIND

LOW 36

A denial of service flaw was found in the way BIND handled DNSSEC validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01675 Published 2019-04-09 Partial fix CWE-617