Red Hat Security Advisory

RHSA-2018:0101

bind security update

Released 2018-01-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-libs-32:9.8.2-0.62.rc1.el6_9.5, bind-utils-32:9.8.2-0.62.rc1.el6_9.5
Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-chroot-32:9.8.2-0.62.rc1.el6_9.5, bind-devel-32:9.8.2-0.62.rc1.el6_9.5 +1
Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-libs-32:9.8.2-0.62.rc1.el6_9.5, bind-utils-32:9.8.2-0.62.rc1.el6_9.5
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-chroot-32:9.8.2-0.62.rc1.el6_9.5, bind-devel-32:9.8.2-0.62.rc1.el6_9.5 +1
Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-chroot-32:9.8.2-0.62.rc1.el6_9.5, bind-libs-32:9.8.2-0.62.rc1.el6_9.5 +2
Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.62.rc1.el6_9.5, bind-devel-32:9.8.2-0.62.rc1.el6_9.5.ppc, bind-sdb-32:9.8.2-0.62.rc1.el6_9.5
Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.62.rc1.el6_9.5, bind-chroot-32:9.8.2-0.62.rc1.el6_9.5, bind-libs-32:9.8.2-0.62.rc1.el6_9.5 +1
Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.62.rc1.el6_9.5, bind-sdb-32:9.8.2-0.62.rc1.el6_9.5

Fixes 1 record

TI-2017-02365 CVE-2017-3145 · GHSA-3hx4-77f4-g7cp

Improper fetch cleanup sequencing in the resolver can cause named to crash

MEDIUM 55

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.27725 Published 2019-01-16 Partial fix CWE-416