Red Hat Security AdvisoryRHSA-2017:1680
bind security and bug fix update
Released 2017-07-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-50.el7_3.1, bind-libs-32:9.9.4-50.el7_3.1, bind-libs-lite-32:9.9.4-50.el7_3.1 +2
- Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-50.el7_3.1, bind-chroot-32:9.9.4-50.el7_3.1, bind-devel-32:9.9.4-50.el7_3.1 +7
- Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-50.el7_3.1, bind-libs-32:9.9.4-50.el7_3.1, bind-libs-lite-32:9.9.4-50.el7_3.1 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-50.el7_3.1, bind-chroot-32:9.9.4-50.el7_3.1, bind-devel-32:9.9.4-50.el7_3.1 +7
- Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-50.el7_3.1, bind-chroot-32:9.9.4-50.el7_3.1, bind-libs-32:9.9.4-50.el7_3.1 +8
- Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-50.el7_3.1, bind-devel-32:9.9.4-50.el7_3.1.ppc, bind-lite-devel-32:9.9.4-50.el7_3.1 +9
- Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-50.el7_3.1, bind-chroot-32:9.9.4-50.el7_3.1, bind-libs-32:9.9.4-50.el7_3.1 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-50.el7_3.1, bind-lite-devel-32:9.9.4-50.el7_3.1, bind-pkcs11-devel-32:9.9.4-50.el7_3.1 +2
Fixes 2 records
Priority MEDIUM 50
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.18157 · Published 2019-01-16 · Partial fix
Priority LOW 32
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructe…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.054 · Published 2019-01-16 · Partial fix CWE-20
