Red Hat Security AdvisoryRHSA-2017:1583
bind security and bug fix update
Released 2017-06-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) bind-32:9.9.4-29.el7_2.6, bind-libs-32:9.9.4-29.el7_2.6, bind-libs-lite-32:9.9.4-29.el7_2.6 +2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) bind-32:9.9.4-29.el7_2.6, bind-chroot-32:9.9.4-29.el7_2.6, bind-devel-32:9.9.4-29.el7_2.6 +7
- Red Hat Enterprise Linux Server EUS (v. 7.2) bind-32:9.9.4-29.el7_2.6, bind-chroot-32:9.9.4-29.el7_2.6, bind-libs-32:9.9.4-29.el7_2.6 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 7.2) bind-devel-32:9.9.4-29.el7_2.6, bind-devel-32:9.9.4-29.el7_2.6.ppc, bind-lite-devel-32:9.9.4-29.el7_2.6 +9
Fixes 5 records
Priority MEDIUM 61
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE AN…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.40556 · Published 2017-01-12 · Fixed CWE-20
Priority MEDIUM 60
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer sectio…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.38733 · Published 2016-11-02 · Partial fix CWE-617
Priority MEDIUM 54
named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.24602 · Published 2017-01-12 · Fixed CWE-20
Priority MEDIUM 50
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.18124 · Published 2017-01-12 · Fixed CWE-20
Priority MEDIUM 44
Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when process…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.08902 · Published 2019-01-16 · Partial fix CWE-617
THREATIST.IORead the docs