Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:2739-1

Опубликовано: 07 нояб. 2016
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

  • A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. (CVE-2016-8864, bsc#1007829).

  • Fix BIND to return a valid hostname in response to ldapdump queries. (bsc#965748)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

Список пакетов

openSUSE Leap 42.1
bind-9.9.9P1-42.1
bind-chrootenv-9.9.9P1-42.1
bind-devel-9.9.9P1-42.1
bind-doc-9.9.9P1-42.1
bind-libs-9.9.9P1-42.1
bind-libs-32bit-9.9.9P1-42.1
bind-lwresd-9.9.9P1-42.1
bind-utils-9.9.9P1-42.1

Ссылки

Описание

named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.

Затронутые продукты
openSUSE Leap 42.1:bind-9.9.9P1-42.1
openSUSE Leap 42.1:bind-chrootenv-9.9.9P1-42.1
openSUSE Leap 42.1:bind-devel-9.9.9P1-42.1
openSUSE Leap 42.1:bind-doc-9.9.9P1-42.1
Ссылки