Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2706-1

Опубликовано: 02 нояб. 2016
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

  • A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. (CVE-2016-8864, bsc#1007829).

  • Fix BIND to return a valid hostname in response to ldapdump queries. (bsc#965748)

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1
SUSE Linux Enterprise Server 11 SP2-LTSS
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-devel-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-libs-32bit-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1
SUSE Linux Enterprise Server 11 SP3-LTSS
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-libs-32bit-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-libs-32bit-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1
SUSE Linux Enterprise Server 11 SP4
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-libs-32bit-9.9.6P1-0.33.1
bind-libs-x86-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-libs-32bit-9.9.6P1-0.33.1
bind-libs-x86-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1
SUSE Linux Enterprise Software Development Kit 11 SP4
bind-devel-9.9.6P1-0.33.1
bind-devel-32bit-9.9.6P1-0.33.1
SUSE Manager 2.1
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-libs-32bit-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1
SUSE Manager Proxy 2.1
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-libs-32bit-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1
SUSE OpenStack Cloud 5
bind-9.9.6P1-0.33.1
bind-chrootenv-9.9.6P1-0.33.1
bind-doc-9.9.6P1-0.33.1
bind-libs-9.9.6P1-0.33.1
bind-libs-32bit-9.9.6P1-0.33.1
bind-utils-9.9.6P1-0.33.1

Ссылки

Описание

named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:bind-9.9.6P1-0.33.1
SUSE Linux Enterprise Point of Sale 11 SP3:bind-chrootenv-9.9.6P1-0.33.1
SUSE Linux Enterprise Point of Sale 11 SP3:bind-doc-9.9.6P1-0.33.1
SUSE Linux Enterprise Point of Sale 11 SP3:bind-libs-9.9.6P1-0.33.1
Ссылки