Red Hat Security Advisory

RHSA-2017:1679

bind security and bug fix update

Released 2017-07-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.4, bind-libs-32:9.8.2-0.62.rc1.el6_9.4, bind-utils-32:9.8.2-0.62.rc1.el6_9.4
Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.4, bind-chroot-32:9.8.2-0.62.rc1.el6_9.4, bind-devel-32:9.8.2-0.62.rc1.el6_9.4 +1
Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.4, bind-libs-32:9.8.2-0.62.rc1.el6_9.4, bind-utils-32:9.8.2-0.62.rc1.el6_9.4
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.4, bind-chroot-32:9.8.2-0.62.rc1.el6_9.4, bind-devel-32:9.8.2-0.62.rc1.el6_9.4 +1
Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.4, bind-chroot-32:9.8.2-0.62.rc1.el6_9.4, bind-libs-32:9.8.2-0.62.rc1.el6_9.4 +2
Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.62.rc1.el6_9.4, bind-devel-32:9.8.2-0.62.rc1.el6_9.4.ppc, bind-sdb-32:9.8.2-0.62.rc1.el6_9.4
Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.4, bind-chroot-32:9.8.2-0.62.rc1.el6_9.4, bind-libs-32:9.8.2-0.62.rc1.el6_9.4 +1
Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.62.rc1.el6_9.4, bind-sdb-32:9.8.2-0.62.rc1.el6_9.4

Fixes 2 records

TI-2017-02363 CVE-2017-3143 · GHSA-jxfm-jqx8-8h25

An error in TSIG authentication can permit unauthorized dynamic updates

MEDIUM 50

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.18157 Published 2019-01-16 Partial fix

TI-2017-02362 CVE-2017-3142 · GHSA-jhf7-373h-xx92

An error in TSIG authentication can permit unauthorized zone transfers

LOW 32

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructe…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.054 Published 2019-01-16 Partial fix CWE-20