Red Hat Security AdvisoryRHSA-2018:0102
bind security update
Released 2018-01-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2, bind-libs-lite-32:9.9.4-51.el7_4.2 +2
- Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-devel-32:9.9.4-51.el7_4.2 +7
- Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2, bind-libs-lite-32:9.9.4-51.el7_4.2 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-devel-32:9.9.4-51.el7_4.2 +7
- Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2 +8
- Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-51.el7_4.2, bind-devel-32:9.9.4-51.el7_4.2.ppc, bind-lite-devel-32:9.9.4-51.el7_4.2 +9
- Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-51.el7_4.2, bind-lite-devel-32:9.9.4-51.el7_4.2, bind-pkcs11-devel-32:9.9.4-51.el7_4.2 +2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) bind-32:9.9.4-51.el7_4.2, bind-chroot-32:9.9.4-51.el7_4.2, bind-libs-32:9.9.4-51.el7_4.2 +6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) bind-devel-32:9.9.4-51.el7_4.2, bind-lite-devel-32:9.9.4-51.el7_4.2, bind-pkcs11-devel-32:9.9.4-51.el7_4.2 +2
Fixes 1 record
Priority MEDIUM 55
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.27725 · Published 2019-01-16 · Partial fix CWE-416
