Red Hat Security AdvisoryRHSA-2018:0488
bind security update
Released 2018-03-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) bind-32:9.9.4-50.el7_3.3, bind-libs-32:9.9.4-50.el7_3.3, bind-libs-lite-32:9.9.4-50.el7_3.3 +2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) bind-32:9.9.4-50.el7_3.3, bind-chroot-32:9.9.4-50.el7_3.3, bind-devel-32:9.9.4-50.el7_3.3 +7
- Red Hat Enterprise Linux Server AUS (v. 7.2) bind-32:9.9.4-29.el7_2.8, bind-chroot-32:9.9.4-29.el7_2.8, bind-libs-32:9.9.4-29.el7_2.8 +6
- Red Hat Enterprise Linux Server E4S (v. 7.2) bind-32:9.9.4-29.el7_2.8, bind-chroot-32:9.9.4-29.el7_2.8, bind-libs-32:9.9.4-29.el7_2.8 +6
- Red Hat Enterprise Linux Server EUS (v. 7.3) bind-32:9.9.4-50.el7_3.3, bind-chroot-32:9.9.4-50.el7_3.3, bind-libs-32:9.9.4-50.el7_3.3 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.2) bind-devel-32:9.9.4-29.el7_2.8, bind-lite-devel-32:9.9.4-29.el7_2.8, bind-pkcs11-devel-32:9.9.4-29.el7_2.8 +2
- Red Hat Enterprise Linux Server Optional E4S (v. 7.2) bind-devel-32:9.9.4-29.el7_2.8, bind-lite-devel-32:9.9.4-29.el7_2.8, bind-pkcs11-devel-32:9.9.4-29.el7_2.8 +2
- Red Hat Enterprise Linux Server Optional EUS (v. 7.3) bind-devel-32:9.9.4-50.el7_3.3, bind-devel-32:9.9.4-50.el7_3.3.ppc, bind-lite-devel-32:9.9.4-50.el7_3.3 +9
- Red Hat Enterprise Linux Server Optional TUS (v. 7.2) bind-devel-32:9.9.4-29.el7_2.8, bind-lite-devel-32:9.9.4-29.el7_2.8, bind-pkcs11-devel-32:9.9.4-29.el7_2.8 +2
- Red Hat Enterprise Linux Server TUS (v. 7.2) bind-32:9.9.4-29.el7_2.8, bind-chroot-32:9.9.4-29.el7_2.8, bind-libs-32:9.9.4-29.el7_2.8 +6
Fixes 1 record
Priority MEDIUM 55
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.27725 · Published 2019-01-16 · Partial fix CWE-416
