Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2697-2

Опубликовано: 02 нояб. 2016
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

  • A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. (CVE-2016-8864, bsc#1007829).

  • Fix BIND to return a valid hostname in response to ldapdump queries. (bsc#965748)

Список пакетов

SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
bind-9.9.9P1-49.1
bind-chrootenv-9.9.9P1-49.1
bind-doc-9.9.9P1-49.1
bind-libs-9.9.9P1-49.1
bind-utils-9.9.9P1-49.1

Ссылки

Описание

named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.

Затронутые продукты
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-9.9.9P1-49.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-chrootenv-9.9.9P1-49.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-doc-9.9.9P1-49.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-libs-9.9.9P1-49.1
Ссылки