ELSA-2017-0276

Опубликовано: 15 фев. 2017

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2017-0276: bind security update (MODERATE)

[32:9.9.4-38.2]

Fix CVE-2017-3135 (ISC change 4557)
Fix and test caching CNAME before DNAME (ISC change 4558)

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

bind

9.9.4-38.el7_3.2

bind-chroot

9.9.4-38.el7_3.2

bind-devel

9.9.4-38.el7_3.2

bind-libs

9.9.4-38.el7_3.2

bind-libs-lite

9.9.4-38.el7_3.2

bind-license

9.9.4-38.el7_3.2

bind-lite-devel

9.9.4-38.el7_3.2

bind-pkcs11

9.9.4-38.el7_3.2

bind-pkcs11-devel

9.9.4-38.el7_3.2

bind-pkcs11-libs

9.9.4-38.el7_3.2

bind-pkcs11-utils

9.9.4-38.el7_3.2

bind-sdb

9.9.4-38.el7_3.2

bind-sdb-chroot

9.9.4-38.el7_3.2

bind-utils

9.9.4-38.el7_3.2

Связанные CVE

CVE-2017-3135

Ссылки на источники

Связанные уязвимости

CVE-2017-3135

CVSS3: 7.5

ubuntu

почти 7 лет назад

Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.