Red Hat Security Advisory

RHSA-2020:5011

bind security and bug fix update

Released 2020-11-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bind-32:9.11.4-26.P2.el7_9.2, bind-export-libs-32:9.11.4-26.P2.el7_9.2, bind-libs-32:9.11.4-26.P2.el7_9.2 +3
Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.2, bind-chroot-32:9.11.4-26.P2.el7_9.2, bind-devel-32:9.11.4-26.P2.el7_9.2 +8
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.2, bind-chroot-32:9.11.4-26.P2.el7_9.2, bind-devel-32:9.11.4-26.P2.el7_9.2 +8
Red Hat Enterprise Linux Server (v. 7) bind-32:9.11.4-26.P2.el7_9.2, bind-chroot-32:9.11.4-26.P2.el7_9.2, bind-export-libs-32:9.11.4-26.P2.el7_9.2 +11
Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.2, bind-devel-32:9.11.4-26.P2.el7_9.2.ppc, bind-export-devel-32:9.11.4-26.P2.el7_9.2 +7
Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.11.4-26.P2.el7_9.2, bind-chroot-32:9.11.4-26.P2.el7_9.2, bind-export-libs-32:9.11.4-26.P2.el7_9.2 +7
Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.2, bind-export-devel-32:9.11.4-26.P2.el7_9.2, bind-lite-devel-32:9.11.4-26.P2.el7_9.2 +3

Fixes 3 records

TI-2020-06916 CVE-2020-8623 · GHSA-3hh5-h95j-2cw7

A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

MEDIUM 42

In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query p…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06606 Published 2020-08-21 Fixed in 9.11.22, 9.16.6 +1 CWE-617

TI-2020-06915 CVE-2020-8622 · GHSA-fh6r-7j2f-pmw4

A truncated TSIG response can lead to an assertion failure

LOW 38

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the serve…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05904 Published 2020-08-21 Partial fix · 9.11.22, 9.16.6 +1 CWE-617

TI-2020-06917 CVE-2020-8624 · GHSA-qgv6-6x66-mr9j

update-policy rules of type "subdomain" are enforced incorrectly

LOW 27

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0382 Published 2020-08-21 Fixed in 9.11.22, 9.16.6 +2 CWE-269